Various options for VPN client installation
Last adaptation to the version: Client 3.6.0 / Installer 1.0.3 (07.2026)
New:
- download the VPN client via a configured proxy
notempty
This article refers to a Beta version
Preliminary remark
The Securepoint VPN client is available in different versions:
- Portable version x64 / arm64
- Installer version x64 / arm64
Installation via installer
The Securepoint Windows VPN Installer provides a convenient option for download and installation:
This means that access to the reseller portal or GitHub is not required for later updates.
- The installer automatically detects the system architecture used (x64 or arm64)
- It downloads the latest version of the VPN client and
- installs it or
- updates an existing installation.
- Alternatively, it downloads the portable version and saves it locally without installation.
The installer needs to be downloaded once
The download of the installer takes place:
- in the reseller portal under Tab VPN-Client x
- at Github under https://github.com/Securepoint/vpn-client-releases/releases
- in the UTM user interface under
- in the UTM admin interface under
Download and installation of the client
- Start the executable file securepoint-vpn-installer.exe
- Agreement to the End User License Agreement is required
- Configure proxy settings if necessary notemptyNew as of Installer v1.0.3
- Start installation
- The installer downloads the latest version of the client
- The client is being installed
- The installation is complete
Fig.1
Fig.2
- Agreement to the End User License Agreement is required
Fig.4
Fig.5
Download the Portable Version
- Start the executable file securepoint-vpn-installer.exe
- Agreement to the End User License Agreement is required
- Configure proxy settings if necessary notemptyNew as of Installer v1.0.3
- Activate Download portable version
- Start installation
- Downloading the Portable Version
- Download completed
The target directory is specified
Fig.1
Fig.2
- Agreement to the End User License Agreement is required
Fig.4
Fig.5
Download and installation of the client via CLI
Download and installation of the client via CLI
The commands are always appended to the installation of the installer call (securepoint-vpn-installer.exe)
- Start the executable file securepoint-vpn-installer.exe with the desired parameters
- Silent installation example: securepoint-vpn-installer.exe /accept-license-agreement=yes /silent
| Parameter | Description / Example |
|---|---|
| Installing or upgrading the client | |
| securepoint-vpn-installer.exe | |
| /help short form: /h |
Show help message |
| securepoint-vpn-installer.exe /help | |
| /silent short form: /s or /q |
Installation or upgrade without display The installation programme performs an installation without displaying a user interface. No prompts, messages or dialogue boxes are displayed to the user. The user cannot cancel the installation Can be combined with Uninstall and Repair. The parameter /silent must always be specified first. If the license terms are not accepted, installation will not proceed. Since the user does not see any prompts during a silent installation, they cannot agree - the installation would fail. |
| securepoint-vpn-installer.exe /s | |
| /enrollment short form: /e |
Distribution of the client via AD with token |
| securepoint-vpn-installer.exe /accept-license-agreement=yes /enrollment "your-token-here" securepoint-vpn-installer.exe /accept-license-agreement=yes /e "your-token-here" | |
| /portable <path> short form: /p <path> |
Run silent portable installation to specified path |
| securepoint-vpn-installer.exe /accept-license-agreement=yes /portable "C:\SecurepointPortable" securepoint-vpn-installer.exe /accept-license-agreement=yes /p "D:\Apps\Securepoint" | |
| /accept-license-agreement=yes | Accept the Securepoint Software License Agreement |
| securepoint-vpn-installer.exe /accept-license-agreement=yes /silent securepoint-vpn-installer.exe /s /accept-license-agreement=yes | |
| /show-license | Show the Securepoint Software License Agreement and exit |
| .\securepoint-vpn-installer.exe /s /sys-import /accept-license-agreement=yes | |
| /sys-import | Automatic import of configurations from the subdirectory .\data\config as system configurations |
| .\securepoint-vpn-installer.exe /s /sys-import /accept-license-agreement=yes | |
| /proxy <url> notempty New as of Installer v1.0.3 |
Specifies the URL for a proxy through which the client download should take place If no protocol is specified, http is used by default. |
| .\securepoint-vpn-installer.exe /proxy https://proxy.anyideas.de:12345 | |
| /proxy-user <username> /proxy-password <passwd> notempty New as of Installer v1.0.3 |
User credentials for authentication, if required |
| .\securepoint-vpn-installer.exe /proxy http(s)://url:port /proxy-user username /proxy-password password |
notempty
New as of Installer v1.0.3: You can specify a proxy
Direct installation
Alternatively, installation via the client itself is possible
- Before each installation, the latest version should be downloaded
- The correct operating system architecture must be considered (x64 / arm64)
- The client installation program installs the version specified in the filename
- An installation can be carried out in two different ways:
- installation via a graphical user interface
- a Quiet installation without user interaction
Both steps, as well as the Installation with automatic import of a configuration and the Ignore runtime prerequisites are explained below.
The download of the vpn clienttakes place
- in the reseller portal under Tab VPN-Client x
- at Github under https://github.com/Securepoint/vpn-client-releases
GUI installation
- The GUI installation is started by executing the previously downloaded file Securepoint-VPN-Client-<Version>.exe.
| 1. | 2. | 3. |
| Abb.1 | Abb.2 | Abb.3 |
| Abbildungen | ||
Welcome message
Privacy policy
Finalise the installation
Administration rights
Administrator rights for cloud registration
Installation completed
Installation with automatic import of a configuration
Installation with automatic import of a configuration:
If there is a folder labelled Config in the same path as the installation file Securepoint_VPN_Client-<Version>.exe, the first configuration file contained there will be imported during the installation process.
Migration of old connections
Migration of old connections:
The migration of connections from the file path of the old Securepoint SSL-VPN Client is carried out via the GUI either at the first start or, if the corresponding function has been activated in the settings, at the next start.
In both cases, if a connection to the old client is found, the migration wizard opens.
| 1. | 2. | 3. |
| Abb.1 | Abb.2 | Abb.3 |
| Abbildungen | ||
Fig.1
- An old connection was found
- The migration process can be cancelled
- The migration process can be executed
Fig.2
Fig.4
If desired, the old client can be uninstalled. If this is successful, a green check mark will appear, along with a message ("Uninstallation of the old client was successful").
notempty
New as of v3.4.0
Installation via the command line (CMD)
- The following command can be used to install the client via the command line:
.\Securepoint_VPN_Client-<Version>.exe /silent
Installation with automatic import of a configuration
Installation with automatic import of a configuration:
If there is a folder labelled Config in the same path as the installation file Securepoint_VPN_Client-<Version>.exe, the first configuration file contained there will be imported during the installation process.Migration via CLI
Migration via CLI:
Migrate VPN configuration: C:\Program Files\Securepoint VPN Client\Securepoint VPN Client.exe" /migrate
The commands are always appended to the client installation program call (securepoint-vpn-client-<version>.exe)
| Parameter | Description / Example |
|---|---|
| securepoint-vpn-client-<version>.exe | |
| /silent short form: /s or /q |
Installation or upgrade without display The installation programme performs an installation without displaying a user interface. No prompts, messages or dialogue boxes are displayed to the user. The user cannot cancel the installation Can be combined with Uninstall and Repair. The parameter /silent must always be specified first. If the license terms are not accepted, installation will not proceed. Since the user does not see any prompts during a silent installation, they cannot agree - the installation would fail. |
| securepoint-vpn-client-<version>.exe /s | |
| /uninstall | |
| securepoint-vpn-client-<version>.exe /uninstall | |
| /repair | Repair of the client Otherwise, a user dialogue will be displayed, without which the programme will not continue, but the confirmation of which will end the programme. |
| securepoint-vpn-client-<version>.exe /silent /repair | |
| /enrollment | |
| securepoint-vpn-client-<version>.exe /enrollment <token> | |
| | more Note the ‘’space‘’ between pipe and more |
Indicates what is being installed and whether it was completed successfully or whether errors occurred |
| securepoint-vpn-client-<version>.exe /repair | more | |
| /sys-import notempty New as of v3.4.0 |
Automatic import of configurations from the subdirectory .\data\config as system configurations |
| .\securepoint-vpn-client-<version>.exe /s /sys-import /accept-license-agreement=yes |
notempty
New as of v3.4.0: sys-import
Automated installation
Example of an automated installation process:
- Notification to users that the new client is being installed
- Copy the installation file Securepoint_VPN_Client-<Version>.exe to the target devices via group policy (GPO) or software distribution system
- If necessary, create a folder with the name Config in the same way, which contains the respective configuration
- Install new VPN client via:C:\Securepoint_VPN_Client-<Version>.exe" /silent
- Migrate old VPN configuration if necessary:C:\Program Files\Securepoint VPN Client\Securepoint VPN Client.exe" /migrate
- Finally, users may have to deactivate the autostart of the old SSL VPN client and activate it in the new VPN client.
An Instruction for end users can be found here: https://wiki.securepoint.de/index.php?title=VPN/VPN-Client-Umstellung&uselang=en
Change autostart
If you are switching from the previous SSL VPN client to the new Securepoint VPN client, you only need to make a few simple changes to the autostart settings to finalise the switch.
Deactivate autostart for old client
- Click on the arrow to show the tray icons
- Right-click to open the menu for the SSL VPN Client
- Use the menu to display the client window
Activate autostart for new client
- Click on the arrow to show the tray icons
- Right-click to open the menu for the Securepoint VPN Client or if not available, start the VPN client first
- Use the menu to show the client window
Ignoring runtime requirements
notempty
Ignoring the runtime environment is not recommended.
When installing the client, it is possible to ignore the required runtime prerequisites
- An option is displayed in the user interface (GUI) to not install the runtime requirements if they are missing on the system
If the runtime requirements already exist, this option is not displayed - The parameter /ignore-prereq is used for the CLI .\Securepoint_VPN_Client-<Version>.exe /ignore-prereq /s
This option is only useful if the runtime requirements
are already pre-installed on the system or the setup could not verify the files when downloading the runtime prerequisites.
This can happen if Microsoft creates a patch for these and the checksum changes as a result.
However, the following things must then be configured manually:
- windowsdesktop-runtime-6.0.12-win-x64.exe May be installed automatically
- VC_redist.x64.exe May be installed automatically
This can happen if Microsoft creates a patch for these and the checksum changes as a result.
However, the following things must then be configured manually:
- The runtime requirements must be downloaded and installed manually before the client can be started.
- The service is not started automatically.
This means that it must be started manually and configured to start automatically at system startup.
This can be implemented as follows (using elevated rights):- Start service:
sc.exe start "Securepoint VPN Client Service" - Configure service for automatic start:
sc.exe config "Securepoint VPN Client Service" start=auto
This causes the service to start automatically the next time the system is started. It is recommended to test these configurations. You can check whether the Securepoint VPN Client Service is started via "Services".
- Start service: