Windows VPN Client

notempty

Dieser Artikel bezieht sich auf eine nicht mehr aktuelle Version!

notempty

Der Artikel für die neueste Version steht hier

notempty

Zu diesem Artikel gibt es bereits eine neuere Version, die sich allerdings auf eine Beta-Version bezieht

Download and installation of the Securepoint VPN Client

Last adaptation to the version: 3.3.3 (10.2025)

New:

ARM-64 Version des VPN-Clients als Beta
Portable x64 und ARM-64 Version des VPN-Clients als Beta
Aktualisierung der Kommandozeilen-Befehle

Import of multiple VPN configurations possible
Export of multiple VPN configurations possible
Automatic connection has a limit
New command line commands for automatic updates and prevent DNS leaks
Pre-log-on can be enabled for all connection types

notempty

This article refers to a Beta version

3.2 3.1.1 3.0.1 1.0

System requirements

Windows 10 x64 or higher
Windows 10 arm64 or higher notempty
New as of v3.3.3
1GB RAM

Operating system:	Windows 10 x64 or higher Windows 10 arm64 or higher notempty New as of v3.3.3
Term requirements:	windowsdesktop-runtime-6.0.12-win-x64.exe May be installed automatically VC_redist.x64.exe May be installed automatically
Hardware:	Storage space: At least 206 MB (if the runtime requirements are also installed) RAM: At least 1024 MB Processor cores: 2, recommended: 4 Processor architecture: 64-bit (x64 or arm64)
Portable Version: notempty New as of v3.3.3	.NET Desktop Runtime (at least Version 8.0.17) VC Redistributables

Download

The download of the vpn clienttakes place

in the reseller portal under Support Downloads Tab VPN-Client x
at Github under https://github.com/Securepoint/vpn-client-releases

The download of the installer takes place: notempty

New as of v3.3.3

in the reseller portal under Support Downloads Tab VPN-Client x

Der Installer muss einmalig heruntergeladen werden.

Er lädt dann seinerseits die jeweils aktuelleste Version des VPN-Clients und
installiert diese bzw.
aktualisiert eine vorhandene Installation.
Alternativ lädt er die Portable Version und speichert diese lokal ohne Installation.

Damit ist kein Zugriff auf das Resellerportal oder auf Github erforderlich.

Beim ersten Start kann ein Passwort für die gesamte Anwendung festgelegt werden

Portable Version

Eine portable Version des VPN Clients ist verfügbar.

Diese speichert den Client als .exe in einem Ordner
Es wird keine Installation (Eintrag in Registry etc.) durchgeführt
Es werden administrative Rechte benötigt
VPN-Tunnel, die in diesem Ordner abgelegt werden, sind auch nach einem Reboot verfügbar

Unterschiede zur normalen Version

Keine Cloud-Anbindung
Alle Daten werden in einer lokalen Datenbank gespeichert
Kein automatischer Start des Clients beim Systemstart
Keine Migration vom SSL VPN Client 2 zu Securepoint VPN Client 3

Wir empfehlen die Einrichtung eins Passwortes
Dieses Passwort verschlüsselt auch alle gespeicherten Daten in der Datenbank

Beim jedem weiteren Start des Securepoint VPN Clients wird das Passwort abgefragt.

Installation

An installation can be carried out in two different ways.

The first is installation via a graphical user interface
The second is a Quiet installation without user interaction.

Both steps, as well as the Installation with automatic import of a configuration and the Ignore runtime prerequisites are explained below.

GUI installation

The GUI installation is started by executing the previously downloaded file Securepoint-VPN-Client-<Version>.exe.


1.	2.	3.


Abb.1	Abb.2	Abb.3


Abbildungen

Welcome message

Licence agreement

Privacy policy

Install runtime requirements

If the prerequisites are already installed, this dialogue should not be displayed.

More detailed information on ignoring runtime prerequisites can be found here.

If desired, cloud registration can be performed directly here using an enrollment token.
notempty

This feature will only be available with the stable release.

Finalise the installation

Administration rights

Administrator rights for cloud registration

Installation completed

Installation with automatic import of a configuration

If there is a folder labelled Config in the same path as the installation file Securepoint_VPN_Client-<Version>.exe, the first configuration file contained there will be imported during the installation process.

Migration of old connections

notempty

This article refers to a version that is no longer current!

notempty

The article for the latest version is here

notempty

There is already a newer version of this article, but it refers to a Beter version

The migration of connections from the file path of the old Securepoint SSL-VPN Client is carried out via the GUI either at the first start or, if the corresponding function has been activated in the settings, at each start.
In both cases, if a connection to the old client is found, the migration wizard opens.


1.	2.	3.


Abb.1	Abb.2	Abb.3


Abbildungen

An old connection was found, the migration process can be Continue or cancelled (Skip).

Old connections can be imported (Import). If this is successful, a green check mark will appear next to the connection name. This step can be completed or skipped by clicking Continue.

If desired, the old client can be uninstalled. If this is successful, a green check mark will appear, along with a message ("Uninstallation of the old client was successful").

Installation via the command line (CMD)

The following command can be used to install the client via the command line:

.\Securepoint_VPN_Client-<Version>.exe /silent

More detailed information can be found in the section on Command line commands.

Installation with automatic import of a configuration

If there is a folder labelled Config in the same path as the installation file Securepoint_VPN_Client-<Version>.exe, the first configuration file contained there will be imported during the installation process.

Migration via CLI

Migrate VPN configuration: C:\Program Files\Securepoint VPN Client\Securepoint VPN Client.exe" /migrate

Automated installation

Example of an automated installation process:

Notification to users that the new client is being installed
Copy the installation file Securepoint_VPN_Client_vXYZ.exe to the target devices via group policy (GPO) or software distribution system
If necessary, create a folder with the name Config in the same way, which contains the respective configuration
Install new VPN client via:C:\Securepoint_VPN_Client_vXYZ.exe" /silent
Migrate old VPN configuration if necessary:C:\Program Files\Securepoint VPN Client\Securepoint VPN Client.exe" /migrate
Finally, users may have to deactivate the autostart of the old SSL VPN client and activate it in the new VPN client.
An Instruction for end users can be found here: https://wiki.securepoint.de/index.php?title=VPN/VPN-Client-Umstellung&uselang=en

Change autostart

If you are switching from the previous SSL VPN client to the new Securepoint VPN client, you only need to make a few simple changes to the autostart settings to finalise the switch.

Deactivate autostart for old client

Click on the arrow to show the tray icons
Right-click to open the menu for the SSL VPN Client
Use the menu to display the client window

Open the menu by clicking on the cogwheel

Use the menu to switch to the client settings

Deselect the "Run on Windows startup" option

Close the window

Activate autostart for new client

Click on the arrow to show the tray icons
Right-click to open the menu for the Securepoint VPN Client or if not available, start the VPN client first
Use the menu to show the client window

Navigate to the settings by clicking on the cogwheel

Activate the "Run on Windows startup" option

Ignoring runtime requirements

notempty

Ignoring the runtime environment is not recommended.

When installing the client, it is possible to ignore the required runtime prerequisites

An option is displayed in the user interface (GUI) to not install the runtime requirements if they are missing on the system
If the runtime requirements already exist, this option is not displayed
The parameter /ignore-prereq is used for the CLI
.\Securepoint_VPN_Client-<Version>.exe /ignore-prereq /s

This option is only useful if the runtime requirements

windowsdesktop-runtime-6.0.12-win-x64.exe May be installed automatically
VC_redist.x64.exe May be installed automatically

are already pre-installed on the system or the setup could not verify the files when downloading the runtime prerequisites.
This can happen if Microsoft creates a patch for these and the checksum changes as a result.
However, the following things must then be configured manually:

The runtime requirements must be downloaded and installed manually before the client can be started.
The service is not started automatically.
This means that it must be started manually and configured to start automatically at system startup.
This can be implemented as follows (using elevated rights):
1. Start service:
  sc.exe start "Securepoint VPN Client Service"
2. Configure service for automatic start:
  sc.exe config "Securepoint VPN Client Service" start=auto
  This causes the service to start automatically the next time the system is started. It is recommended to test these configurations. You can check whether the Securepoint VPN Client Service is started via "Services".

Update

Update dialogue

As an administrator, automatic updates can be enabled (see Advanced settings). If this is not desired, an update icon will be displayed in the header when an update is available.

If automatic updates are enabled, the system will automatically check for updates every 12 hours. A user can decline an automatic update 5 times, after which it will be enforced.

The service is restarted after an update.
The client will use the new version the next time it is started.
Connections that are set up with ‘’Autostart activated‘’ are restarted.

Tray-Icon

Tray icon of the client in the taskbar

When the client is started, the client icon appears in the taskbar as a tray icon. The following options are available by right-clicking on this icon:

Show the client window
Establish or disconnect a connection (is hidden if several connections are configured)
Close application

Importing a VPN configuration

Caption	Description	Importing a VPN configuration
Protocol	Protocol selection (SSL VPN, WireGuard, or folder For importing multiple configurations notempty : 3.2 )
File	Use the button to select the configuration file. button, you can select the configuration file.
Connection name	Change connection names if necessary
Create system connection	If the client was run as an administrator (indicated by the word Admin in the upper right corner of the title bar), the connection can also be created as a system connection, i.e., for all user accounts on the computer.
Import	Import connection

Create configuration

Call up the configuration wizard in the menu under

Start the configuration of a new VPN connection with Next.

Step 1

Desired protocol SSLVPNWireGuard
Meaningful name for the connection
If executed with admin rights: If necessary, UserSystem
The connection is then available in all user accounts on this computer.

SSLVPN

To configure an SSLVPN connection, follow the instructions below:

Step 2

At least one VPN server must be added using the protocol, the IP address or the host name and the port.

Step 3

Select client and server keys or certificates (with )
Assignment with typical naming:

Certification Authority (CA)
…cert.pem

Private key (RSA)
…cert.key

Public Key (CA)
…ca.pem

The option Check server certificates can be used to enable server certificate verification.

Step 4

Configure the connection with the VPN server accordingly

Redirect Gateway

If deactivated, only packets to a local destination network are routed through the tunnel
If activated, all packets are routed to the tunnel and from there routed further if necessary

Step 5

Summary of all settings for review. If all settings are correct, the configuration wizard can be closed by clicking the Apply button and the connection can be added.

WireGuard

Follow the instructions below to configure a WireGuard connection:

Step 2

At least one VPN server must be added using the protocol, the IP address or the host name and the port.

Step 3

Enter client and server key

optional Enter preshared key

Step 4

Client IP address required

Other values can be left blank, these options are then either ignored or assigned a default value

DNS address(es) can also be entered as a domain notempty

as of v1.0.9

Step 5

Summary of all settings for verification. If all settings are correct, the configuration wizard can be closed with the Apply button and the connection added.

Connection settings

System and user connections

User connections are saved in the Windows registry under the HKEY_CURRENT_USER context and are therefore only available to the Windows user who imported the connection.

System connections are stored under HKEY_LOCAL_MACHINE and are therefore available to every user of the machine, but require administration rights for import.

Establishing a connection

A connection can be established either via the context menu / Connect or by clicking on the connection button.

Connection disconnected

Connection is being established

Connection button

For SSL VPN connections, it may be necessary to enter an OTP

Connection overview

Caption	Value	Description	Connection overview
Search		Search bar to search connections Only displayed after seven connections
Status	Connected	Connection is established
	Connecting	Connection is being established
	Failed	Connection could not be established
	Disconnected	No connection
Name	TTT-Point-1	Name of the connection
Mehr		Opens the context menu for the respective connection.
	/	Switches between standard view and compact view of the client

Extended view

Connection details in the expanded view

Additional connection details are displayed via the “Show Details” entry in the context menu:

Received data
Sent data
Connection duration
Device name (interface used)
Wintun version
IPv4 address / IPv6 address

Compact view

	Description	Compact view VPN Client
➊	Switches between standard view and compact view of the client
➋	- WireGuard - SSL-VPN - System connection (available to all users) - User data is stored - Reconnect when connection is lost - Connect automatically - PIN required for connection
➌	Connection duration
➍	Link button
➎	Upload and download volume and speed

Context menu

Call using the button in the connection overview or by right-clicking on a connection.

Menu item	Description	WireGuard-Connections Context menu SSLVPN-Connections Context menu
Connect	Enable VPN connection
Edit Only possible as Admin with a system connection	Shows the associated configuration and the certificates that can be edited
Apply OTP	Starting with v3.1.0, the system automatically detects whether an OTP is required. No manual configuration is necessary.
Connect automatically	Automatically establishes this connection when the app is started.
Reconnect when connection is lost	If the connection is unexpectedly interrupted, an attempt to reconnect will be made automatically.
Connect pre-logon Only possible as Admin with a system connection	When the system starts up, a connection to this system connection is initiated For SSLVPN connections, the user login data must be saved As long as OTP is active, pre-logon cannot be activated

Edit user data Only possible as Admin with a system connection Not possible with a Wireguard connection	Opens a window through which you can update the user data
Delete user data Only possible as Admin with a system connection Not possible with a Wireguard connection	Deletes the user data for the current connection

Add or edit PIN Only possible as Admin with a system connection Only possible with a Wireguard connection	Secure connection with PIN, which will then be required for every connection attempt.
Delete PIN Only possible as Admin with a system connection Only possible with a Wireguard connection	Delete connection PIN

Excluded SSIDs Only possible as Admin with a system connection	Configure networks for which no connection should be established Currently only configurable via context menu Dialog for excluded SSIDs
Export Only possible as Admin with a system connection	Opens a dialogue through which you can export the selected connection as a text file notempty It is not possible to export ASC connections neither as a user nor as an administrator .
Export multiple connections Only possible as Admin with a system connection	Opens a dialog box that allows you to export multiple selected connections at once. notempty It is not possible to export ASC connections neither as a user nor as an administrator .
Show log	Calls up the log for the specific connection
Show details	Opens the connection to the full width and length and displays further helpful information
Diagnosis	Switches to the diagnostic view Testing server connectivity (Can a specified server be reached?) Analyse the log Testing the public IP address (via https://checkip.spdyn.de)

Delete connection Only possible as Admin with a system connection	Deletes the current connection

Client settings

Settings for application start:

Run when starting Windows
Start application minimised (tray icon)
Show migration wizard again

Settings relating to the connections:

Minimise the client after connecting

Allow multiple VPN connections at the same time

Block shutdown during active connection

Attitudes towards appearance:

Show pop-up window when application is minimised

Display flyout information within the application

Activate dark mode

Choose language

notempty

These settings are only displayed if the application was started as an administrator, this can be recognised by the "ADMIN" at the top right.

Advanced settings for administrators:

Perform client updates automatically

Force DNS, all DNS requests must be made via the VPN

Log

Button	Description	Log overview
Complete	Filters the log by type: Complete log, Client, Connections, Daily, Service
50	Shows a maximum of the set number of log messages
Copy Log	Copies the entire (also invisible) log
Copy current	Copies the entire currently visible log
Export	Exports the entire currently visible log

Command line commands

Installation des Installers

Kommandozeilen Befehle zur Installation des Installers

The commands are always appended to the installation of the installer call (securepoint-vpn-installer.exe)

Parameter	Description / Example
	Installing or upgrading the client
	securepoint-vpn-installer.exe
/help short form: /h	Show help message
/help short form: /h	securepoint-vpn-installer.exe /help
/silent short form: /s or /q	Installation or upgrade without display The installation programme performs an installation without displaying a user interface. No prompts, messages or dialogue boxes are displayed to the user. The user cannot cancel the installation . Can be combined with Uninstall and Repair. The parameter /silent must always be specified first.
/silent short form: /s or /q	securepoint-vpn-installer.exe /s
/enrollment short form: /e	Distribution of the client via AD with token
/enrollment short form: /e	securepoint-vpn-installer.exe /accept-license-agreement=yes /enrollment "your-token-here" securepoint-vpn-installer.exe /accept-license-agreement=yes /e "your-token-here"
/portable <path> short form: /p <path>	Run silent portable installation to specified path
/portable <path> short form: /p <path>	securepoint-vpn-installer.exe /accept-license-agreement=yes /portable "C:\SecurepointPortable" securepoint-vpn-installer.exe /accept-license-agreement=yes /p "D:\Apps\Securepoint"
/accept-license-agreement=yes	Accept the Securepoint Software License Agreement
/accept-license-agreement=yes	securepoint-vpn-installer.exe /accept-license-agreement=yes /silent securepoint-vpn-installer.exe /s /accept-license-agreement=yes
/show-license	Show the Securepoint Software License Agreement and exit
/show-license	securepoint-vpn-installer.exe /show-license

Installation des VPN-Clients

Kommandozeilen Befehle zur Installation des VPN-Clients

The commands are always appended to the client installation program call (securepoint-vpn-client-<version>.exe)

Parameter	Description / Example
	Installation dieser Version des Clients (startet das GUI)
	securepoint-vpn-client-<version>.exe
/silent short form: /s or /q	Installation or upgrade without display The installation programme performs an installation without displaying a user interface. No prompts, messages or dialogue boxes are displayed to the user. The user cannot cancel the installation . Can be combined with Uninstall and Repair. The parameter /silent must always be specified first.
/silent short form: /s or /q	securepoint-vpn-client-<version>.exe /s
/uninstall	Uninstalling the client
/uninstall	securepoint-vpn-client-<version>.exe /uninstall
/repair	Repair of the client The Repair command must always be executed in combination with the /silent parameter. Otherwise, a user dialogue will be displayed, without which the programme will not continue, but the confirmation of which will end the programme.
/repair	securepoint-vpn-client-<version>.exe /silent /repair
/enrollment	Performs enrollment for a USC connection
/enrollment	securepoint-vpn-client-<version>.exe /enrollment <token>
\| more Note the ‘’space‘’ between pipe and more	Indicates what is being installed and whether it was completed successfully or whether errors occurred
\| more Note the ‘’space‘’ between pipe and more	securepoint-vpn-client-<version>.exe /repair \| more

Commands at runtime

The commands are always appended to the installed client call (.\"Securepoint VPN Client.exe")

Command	Description / Example
/enrollment	Performs enrollment for a USC connection
/enrollment	s.\"Securepoint VPN Client.exe" /enrollment <token>
/log	Exports the complete log
/log	.\Securepoint_VPN_Client.exe /log
/import <path> short form: /i <path>	Zum importieren aller VPN Konfigurationen aus dem angegebenem Zielordner. Hier werden die Konfigurationen im Benutzer-Kontext angelegt.
/import <path> short form: /i <path>	.\Securepoint_VPN_Client.exe /import "C:\Downloads\VPN-Configs"
/migrate short form: /m	Migrate a connection from the file path of the old Securepoint SSL VPN client. The result per connection is either ALREADY EXISTS (connection with the same name already exists in the registry. It is important that only the name is taken into account, not whether an identical copy of a config has already been imported), SUCCESS or FAILED. All connections are created as USER connections. For SYSTEM connections, these must be created manually in the client.
/migrate short form: /m	.\Securepoint_VPN_Client.exe /migrate
/autoupdate <value> : bool	Automatic updates of the client are only possible with admin rights.
/autoupdate <value> : bool	.\Securepoint_VPN_Client.exe /autoupdate true
/prevent-dns-leaks <value> : bool	Enable the “Prevent DNS leaks” option Only possible with admin rights
/prevent-dns-leaks <value> : bool	.\Securepoint_VPN_Client.exe /prevent-dns-leaks true