Jump to:navigation, search
Wiki

VPN Client

From Securepoint Wiki





notempty
Dieser Artikel bezieht sich auf eine nicht mehr aktuelle Version!

notempty
Der Artikel für die neueste Version steht hier

notempty
Zu diesem Artikel gibt es bereits eine neuere Version, die sich allerdings auf eine Beta-Version bezieht













































































































































Download and installation of the Securepoint VPN Client

Last adaptation to the version: 1.0.9 beta 08.2024

New:
notempty
This article refers to a Beta version
-
notempty
Beta version - only as reseller preview
Not intended for productive use!

System requirements

  • Windows 10 x64 or higher
  • 1GB RAM
Operating system:
  • Windows 10 x64 or higher
Term requirements:
  • windowsdesktop-runtime-6.0.12-win-x64.exe May be installed automatically
  • VC_redist.x64.exe May be installed automatically
Hardware:
  • Storage space: At least 206 MB (if the runtime requirements are also installed)
  • RAM: At least 1024 MB
  • Processor cores: 2, recommended: 4
  • Processor architecture: 64-bit (x64)

Download

The download takes place in the reseller portal under Support Downloads Tab VPN-Client x

Installation

An installation can be carried out in two different ways.

  • The first is installation via a graphical user interface
  • The second is a Quiet installation without user interaction.

Both steps, as well as the Installation with automatic import of a configuration and the Ignore runtime prerequisites are explained below.
The following system requirements must also be observed:

GUI installation

The GUI installation is started by executing the previously downloaded file Securepoint-VPN-Client-<Version>.exe.













Installation with automatic import of a configuration

If there is a folder labelled Config in the same path as the installation file Securepoint_VPN_Client-<Version>.exe, the first configuration file contained there will be imported during the installation process.

Migration of old connections





notempty
This article refers to a version that is no longer current!

notempty
The article for the latest version is here

notempty
There is already a newer version of this article, but it refers to a Beter version






































The migration of connections from the file path of the old Securepoint SSL-VPN Client is carried out via the GUI either at the first start or, if the corresponding function has been activated in the settings, at each start.
In both cases, if a connection to the old client is found, the migration wizard opens.













Installation via the command line (CMD)

The following command can be used to install the client via the command line:
.\Securepoint_VPN_Client-<Version>.exe /quiet More detailed information can be found in the section on Command line commands.

Installation with automatic import of a configuration

If there is a folder labelled Config in the same path as the installation file Securepoint_VPN_Client-<Version>.exe, the first configuration file contained there will be imported during the installation process.

Migration via CLI

Migrate VPN configuration: C:\Program Files\Securepoint VPN Client\Securepoint VPN Client.exe" /migrate


Automated installation

Example of an automated installation process:

  1. Notification to users that the new client is being installed
  2. Copy the installation file Securepoint_VPN_Client_vXYZ.exe to the target devices via group policy (GPO) or software distribution system
  3. If necessary, create a folder with the name Config in the same way, which contains the respective configuration
  4. Install new VPN client via:C:\Securepoint_VPN_Client_vXYZ.exe" /quiet
  5. Migrate old VPN configuration if necessary:C:\Program Files\Securepoint VPN Client\Securepoint VPN Client.exe" /migrate
  6. Finally, users may have to deactivate the autostart of the old SSL VPN client and activate it in the new VPN client.
    Eine Instructions for end users can be found here: https://wiki.securepoint.de/VPN/VPN-Client-Umstellung




























In dieser Seite werden die Variablen für unterschiedliche Sprachen definiert.
Diese Seite wird auf folgenden Seiten eingebunden














Change autostart

If you are switching from the previous SSL VPN client to the new Securepoint VPN client, you only need to make a few simple changes to the autostart settings to finalise the switch.


Deactivate autostart for old client













  1. Click on the arrow to show the tray icons
  2. Right-click to open the menu for the SSL VPN Client
  3. Use the menu to display the client window
  • Open the menu by clicking on the cogwheel
  • Use the menu to switch to the client settings
  • Deselect the "Run on Windows startup" option
  • Close the window
    • Activate autostart for new client













    1. Click on the arrow to show the tray icons
    2. Right-click to open the menu for the Securepoint VPN Client or if not available, start the VPN client first
    3. Use the menu to show the client window
  • Navigate to the settings by clicking on the cogwheel
  • Activate the "Run on Windows startup" option
    •


    Ignoring runtime requirements

    notempty
    Ignoring the runtime environment is not recommended.

    When installing the client, it is possible to ignore the required runtime prerequisites

    • An option is displayed in the user interface (GUI) to not install the runtime requirements if they are missing on the system
      If the runtime requirements already exist, this option is not displayed
    • The parameter /ignore-prereq is used for the CLI
      .\Securepoint_VPN_Client-<Version>.exe /ignore-prereq /s
    This option is only useful if the runtime requirements
    • windowsdesktop-runtime-6.0.12-win-x64.exe May be installed automatically
    • VC_redist.x64.exe May be installed automatically
    are already pre-installed on the system or the setup could not verify the files when downloading the runtime prerequisites.
    This can happen if Microsoft creates a patch for these and the checksum changes as a result.
    However, the following things must then be configured manually:
    1. The runtime requirements must be downloaded and installed manually before the client can be started.
    2. The service is not started automatically.
      This means that it must be started manually and configured to start automatically at system startup.
      This can be implemented as follows (using elevated rights):
      1. Start service:
        sc.exe start "Securepoint VPN Client Service"
      2. Configure service for automatic start:
        sc.exe config "Securepoint VPN Client Service" start=auto
        This causes the service to start automatically the next time the system is started. It is recommended to test these configurations. You can check whether the Securepoint VPN Client Service is started via "Services".

    Update

    Update dialogue

    As administrator, automatic updates can be activated (see Advanced settings), if this is not desired, an update icon is displayed in the header if an update is available.

  • All active connections are interrupted during an update
  • The service is restarted after an update.
    The client will use the new version the next time it is started.
    Connections that are set up with ‘’Autostart activated‘’ are restarted.

    • Tray-icon

    Tray icon of the client in the taskbar

    When the client is started, the client icon appears in the taskbar as a tray icon. The following options are available by right-clicking on this icon:

    • Show the client window
    • Establish or disconnect a connection (is hidden if several connections are active)
    • Close application

    Importing a VPN configuration

    Importing a VPN configuration
    • Navigate to the menu item Import
    • Choose protocol (SSLVPN, Wireguard) ➊
    • Select source file ➋
    • Import the name of the connection or define your own name ➌
    • If the client was run as an administrator (recognisable by the ADMIN note in the top right-hand corner of the title bar), the connection can also be created as a system connection, i.e. for all user accounts on the computer ➍
    • Complete the import with the Import button

    Create configuration

    Call up the configuration wizard in the menu under Create













    Step 1
    Start the configuration of a new VPN connection with Next.
    Step 2
    • Meaningful name for the connection
    • prefered protocol
      SSLVPN WireGuard
    • If executed with admin rights: If necessary,  Create as system connection
      The connection is then available in all user accounts of this computer
    Continue

    SSLVPN

    To configure an SSLVPN connection, follow the instructions below:













    Step 3
    • At least one VPN server must be added using the protocol, the IP address or the host name and the port.
    Step 4
  • Select client and server keys or certificates (with …)
    Allocation with typical naming:
    Public Key
    …cert.pem …
     
    Private Key
    …cert.key …
     
    Root CA
    …ca.pem …
  • If the key and certificate are in the same file, this can be selected using the checkbox
    • Step 5
    • Configure the connection with the VPN server accordingly
    •  Redirect Gateway
      • If deactivated, only packets to a local destination network are routed through the tunnel
      • If activated, all packets are routed to the tunnel and from there routed further if necessary
    Step 6
    Summary of all settings for verification. If all settings are correct, the configuration wizard can be closed with the Add button and the connection added.

    WireGuard

    Follow the instructions below to configure a WireGuard connection:













    Step 3
    • At least one VPN server must be added using the protocol, the IP address or the host name and the port.
    Step 4
  • Enter client and server key
  • optional Enter preshared key
    • Step 5
  • Client IP address required
  • Other values can be left blank, these options are then either ignored or assigned a default value
  • DNS address(es) can also be entered as a domain notempty
    as of v1.0.9
    • Step 6
    Summary of all settings for verification. If all settings are correct, the configuration wizard can be closed with the Add button and the connection added.


    Connection settings

    System and user connections

    User connections are saved in the Windows registry under the HKEY_CURRENT_USER context and are therefore only available to the Windows user who imported the connection.

    System connections are stored under HKEY_LOCAL_MACHINE and are therefore available to every user of the machine, but require administration rights for import.

    Connection status

    Connection button

    The image of the connection button has several states:

    • The lock is...
      • rot: connection is cut
      • gelb: Connection is established
      • grün: Connection is established
    • The globe is
      • rot: No internet connection
      • grün: Internet connection is being established

    Tags

    Connection overview with connection tags
    Tag Description
    USER User connection
    SYSTEM System connection
    SSLVPN Connection is of type SSLVPN
    WireGuard Connection is of type WireGuard
    Deactivated Connection is deactivated
    Connection contains saved user data
    Connection contains saved user data and Autostart is switched on
    Connection is a favourite


    Extended view

    Connection details in the expanded view

    Double-click on the tile of a connection
    or the ‘’Extended view‘’ entry in the context menu to display additional connection details:

    • Received data
    • Data sent
    • Connection duration
    • Device name (interface used)
    • Wintun version
    • IPv4 address / IPv6 address

    Context menu

    Appears when you right-click on a connection

    Menu item Description
    Connections Context menu
     Favourite Marks/deselects the connection as a favourite. This is then always displayed at the top
     Edit
    Only possible as Admin with a system connection
    		Shows the associated configuration and the certificates that can be edited
     Rename
    Only possible as Admin with a system connection
    		Opens a window that allows you to change the name of the connection (no duplicates allowed)
     Call up log Calls up the log for the specific connection
     Edit user data
    Only possible as Admin with a system connection
    Not possible with a Wireguard connection
    		Opens a window through which you can update the user data
     Delete user data
    Only possible as Admin with a system connection
    Not possible with a Wireguard connection
    		Deletes the user data for the current connection
     Export
    Only possible as Admin with a system connection
    		Opens a dialogue through which you can export the selected connection as a text file
     Deactivate/activate
    Only possible as Admin with a system connection
    		Deactivates/activates the connection. An additional "Deactivated" tag appears next to the connection type. The connection can no longer be used.
     Autostart Automatically establishes this connection when the app is started.
    If no user data is saved, it will be requested.
     Activate/deactivate OTP
    Only possible as Admin with a system connection
    Not possible with a Wireguard connection
    		Activates/deactivates the entry of a one-time password during a connection attempt
     Extended view (or double-click on the connection) Opens the connection to the full width and length and displays further helpful information
     Diagnosis
    • Switches to the diagnostic view
    • Testing server connectivity (Can a specified server be reached?)
    • Analyse the log
    • Testing the public IP address (via https://checkip.spdyn.de)
     Delete connection
    Only possible as Admin with a system connection
    		Deletes the current connection


    Client settings













    Settings for application start:
    • Run when starting Windows
    • Start application minimised (tray icon)
    • Show migration wizard again
    Settings relating to the connections:
  • Minimise the client after connecting
  • Allow multiple VPN connections at the same time
  • Block shutdown during active connection
    • Attitudes towards appearance:
  • Show pop-up window when application is minimised
  • Display flyout information within the application
  • Activate dark mode
  • Choose language
    • notempty
    These settings are only displayed if the application was started as an administrator, this can be recognised by the "ADMIN" at the top right.

    Advanced settings for administrators:
  • Perform client updates automatically
  • Force DNS, all DNS requests must be made via the VPN


    • Log

    Button Description
    Log overview
    TTT-Point-1 Limit logs to specific connection
  • This button is only displayed if "Connections" is selected as the type.
    • All levels Filters for either all levels (Info, Warning, Error) or only Warning + Error
    Connections Filters the log by type: Complete log, Client, Connections, Daily, Service
    50 Shows a maximum of the set number of log messages
    Copy all Copies the entire (also invisible) log
    Copy Copies the entire currently visible log
    Export... Exports the entire currently visible log
    Open...
    This button is only available if the application is run as an administrator.
    		Opens the Explorer with the path of the database
    Delete...
    This button is only available if the application is run as an administrator.
    		Opens a dialogue in which either the entire log or the entire currently selected log can be deleted
  • Admin rights are required for this


    • Command line commands

    Installation, upgrade, uninstallation and repair

    Description Parameter Example
    Installing or upgrading the client Securepoint_VPN_Client-<Version>.exe
    Installation or upgrade without display
    The installation programme performs an installation without displaying a user interface.
    No prompts, messages or dialogue boxes are displayed to the user.
    The user cannot cancel the installation
    .
    Can be combined with Uninstall and Repair.
    The parameter /quiet must always be specified first.    		 /quiet Securepoint_VPN_Client-<Version>.exe /quiet
    Uninstalling the client /uninstall Securepoint_VPN_Client-<Version>.exe /uninstall
    Repair of the client
  • The Repair command must always be executed in combination with the /quiet parameter.
    Otherwise, a user dialogue will be displayed, without which the programme will not continue, but the confirmation of which will end the programme.
    		• /repair Securepoint_VPN_Client-<Version>.exe /quiet /repair
    Indicates what is being installed and whether it was completed successfully or whether errors occurred | more Securepoint_VPN_Client-<Version>.exe /repair | more
    Note the ‘’space‘’ between pipe and more


    Commands at runtime

    The commands are always appended to the client call (.Securepoint_VPN_Client-<version>.exe).

    Command Description Example
    /connect "CONNECTION NAME"
    short form: /c "CONNECTION NAME"
    • Establish connection
      Can be combined with the arguments /hide-client or /hide-migration
    • To start and connect via Commandline, the user data for the connection must be saved. If Autoreconnect is activated, only the app is started.
    		 .\Securepoint_VPN_Client.exe /connect "TTT-Point-1"
    .\Securepoint_VPN_Client.exe /connect "TTT-Point-1" /hide-client
    /migrate
    short form: /m
    		Migrate a connection from the file path of the old Securepoint SSL VPN client.
  • The result per connection is either ALREADY EXISTS (connection with the same name already exists in the registry. It is important that only the name is taken into account, not whether an identical copy of a config has already been imported), SUCCESS or FAILED.
  • All connections are created as USER connections. For SYSTEM connections, these must be created manually in the client.
    		•  .\Securepoint_VPN_Client.exe /migrate
    and
    /hide-migration Prevents the migration assistant from being displayed .\Securepoint_VPN_Client.exe /hide-migration
    /hide-client Prevents the application window from being displayed
  • /hide-client also hides the migration dialogue. A combination is therefore not necessary.
    		•  .\Securepoint_VPN_Client.exe /hide-client
    /list
    short form: /l
    		Lists all system and user connections. .\Securepoint_VPN_Client.exe /list
    /help
    short form: /h
    		Help on the commands .\Securepoint_VPN_Client.exe /help
    Retrieved from "https://wiki.securepoint.de/index.php?title=VPN/VPN-Client_v1.0&oldid=99895"