Download and installation of the Securepoint SSL VPN client
Last adaptation to the version: 12.6.0 (UTM) (12.2023)
New:
- Updated to Redesign of the webinterface
This article refers to a Resellerpreview
The latest version should always be used.
Available in Reseller Portal or on the UTM from version 11.8.16.1 or from version 12.2.
Available in Reseller Portal or on the UTM from version 11.8.16.1 or from version 12.2.
As of version 11.8.16.1 or as of version 12.2.
- In the group or user settings in the SSL VPN tab, the option Client downloadable in user interface must be activated
- The user must be a member of a group with the permission User interface
- In the implicit rules, access to the User interface portal must be activated
- In the group or user settings in the SSL VPN tab, the option Client downloadable in user interface must be activated
- The user must be a member of a group with the permission User interface
- In the implicit rules, access to the User interface portal must be activated
In versions ≦ 2.0.33, errors may occur in combination with Windows 10 versions 21H1 and later (update from May 2021).
Microsoft has discontinued support for root certificates with kernel-mode signing in the Microsoft Trusted Root program. This means that drivers with cross-signed certificates have lost their trusted status.
Download
The download of the latest SSL-VPN client is possible via:
- The Reseller Portal: Menu Downloads / SSL-VPN
- The user interface of the UTM (By default accessible via port 443 = https. If this port is used for an internal server, the port can be viewed in the Area Server Settings section WebserverUser Webinterface Port 443
.) - On Sourceforge https://sourceforge.net/projects/securepoint/?source=directoryVPN-Client
- On Github https://github.com/Securepoint/openvpn-client/releases
Download in the reseller portal as .exe or as .msi
(Only for registered resellers of Securepoint GmbH)
(Only for registered resellers of Securepoint GmbH)
UTM"Homer@Userinterface" 
Download im Userinterface einer Securepoint UTM unter dem Menüpunkt :
The installer is preconfigured and already contains all required certificates and keys The UTM updates the client version for download weekly, regardless of the firmware version
- Installer
- Portable Client (ohne Installation)
- Konfigurationsdateien mit Zertifikaten
- The download is done as .zip file
Download from sourceforge.net as
- Installer .exe
- MSI file .msi
- Portable version without installation .zip
Download at GitHub as
- Installer .exe
- MSI file .msi
- Portable version without installation .zip
- Source Code
Installation
Installation is started by
- Execute the file SSLVPNClient.exe with administrator rights' The setup also starts without admin rights, but then cannot start the required service afterwards
- Opening the SSLVPNClient.msi file with startup parameters and with administrator rights'
- Windows 10/11 - german
msiexec /qn /i openvpn-client-installer-2.0.33.msi CWINVERSION=10 - Windows 7 - german
msiexec /qn /i openvpn-client-installer-2.0.33.msi CWINVERSION=7 - Windows 10/11 - english
msiexec /qn /i openvpn-client-installer-2.0.33.msi TRANSFORMS=":en-us.mst" CWINVERSION=10 - Windows 7 - english
msiexec /qn /i openvpn-client-installer-2.0.33.msi TRANSFORMS=":en-us.mst" CWINVERSION=7
- Windows 10/11 - german
Up to version 2.0.35, the TAP driver for Windows 7 was installed by default.
Selecting the language of the installation wizard
Welcome message
License terms
Choosing the destination folder
Start mode (default must be chosen!)
Selection of product functions
Confirm UAC message
If the client is still running, it is necessary to restart the client.
Installation completed
Update
Update from versions ≧ 2.0.26
- Execute the installation file (.msi or .exe) with administrator rights as described under Installation.
Update from versions ≦ 2.0.25
- The signature for driver ≦2.0.25 has expired.
- Windows does not update the driver signature during an update.
As a result, they cannot be used. - The TAP driver must be uninstalled in this case before the update
- Uninstalling with the device manager:
The uninstallation is done via the context menu of the TAP network adapter in the device manager
- Uninstalling with the device manager:
"C:\Program Files (x86)\Securepoint SSL VPN\bin\tapinstall.exe" remove tap0901
- Afterwards the installation of the current version can be carried out
Update to versions ≧ 2.0.33
As of version 2.0.33, the configuration is protected against unauthorized changes.
An update may trigger a UAC (User Account Control) message to allow a change.
A checksum is formed the first time it is used. This is then checked for further changes.
Open SSL VPN Client
Display of the SSL client menu via the lock icon in the taskbar
Start Parameter
If the start parameter -noSave is appended to the file name, saving of the access data is prevented.
For example, c:\Program Files (x86)\Securepoint SSL VPN\SSLVpnClient.exe
will become
c:\Program Files (x86)\Securepoint SSL VPN\SSLVpnClient.exe -noSave
Import SSL VPN configuration
- The settings menu can be used to import an SSL VPN configuration.
- A .ovpn file is used as the source file.
- The file name of the .ovpn file or a freely selectable text can be used as display name.
As of version 2.0.33, the configuration is protected against unauthorized changes.
When importing a configuration, a UAC (User Account Control) message may be triggered to allow a change.
A checksum is formed the first time it is used. This is then checked for further changes.
Otherwise, this information can be added by right-clicking on a created connection, Settings / Advanced / Tab General individual.
Autostart
- Click on the gear icon to access the {spc client settings
Request OTP code extra
In the VPN client, you can configure whether the OTP code should be requested separately:
- Click on the cogwheel symbol to open the client settings.
- Under the tab Connections, the function Use Interact must now be activated.
Known Issues
With the Windows version 21H1' (update as of May 2021), the tap driver may be rejected up to versions ≦ 2.0.33 because Microsoft has discontinued support for root certificates with kernel-mode signing in the Microsoft Trusted Root program.
Thus, drivers with cross-signed certificates have lost their trust status.
Solution:
- Please install the latest SSL VPN client version 2.0.34 or later
- Available from the Reseller Portal
- In the user interface of the UTM from version 11.8.16.1 resp. 12.2
- In the admin interface of the UTM in the menu Area User Button / Area SSL-VPN Button