Jump to:navigation, search
Wiki





























De.png
En.png
Fr.png






Download and installation of the Securepoint SSL VPN client
Last adaptation to the version: 12.6.0 (UTM) (12.2023)
New:
  • Updated to Redesign of the webinterface
notempty
This article refers to a Resellerpreview

09.2023


  • The client automatically checks at each restart whether a new version is available - if so, it offers the download link.
  • notempty
    The latest version should always be used.
    Available in Reseller Portal or on the UTM from version 11.8.16.1 or from version 12.2.
    As of version 11.8.16.1 or as of version 12.2.
    - In the group or user settings in the SSL VPN tab, the option Client downloadable in user interface must be activated
    - The user must be a member of a group with the permission User interface
    - In the implicit rules, access to the User interface portal must be activated
      
    In versions ≦ 2.0.33, errors may occur in combination with Windows 10 versions 21H1 and later (update from May 2021).
    Microsoft has discontinued support for root certificates with kernel-mode signing in the Microsoft Trusted Root program. This means that drivers with cross-signed certificates have lost their trusted status.
      


    Download

    The download of the latest SSL-VPN client is possible via:

    RSP Download SSL-VPN.png
    Download in the reseller portal as .exe or as .msi
    (Only for registered resellers of Securepoint GmbH)
    SSL-VPN Client Download UTM"Homer@Userinterface" UTM v12.6 VPN Userinterface download-en.png
    Download im Userinterface einer Securepoint UTM unter dem Menüpunkt SSL-VPN :
    • Installer
    • Portable Client (ohne Installation)
    • Konfigurationsdateien mit Zertifikaten
  • The installer is preconfigured and already contains all required certificates and keys
  • The UTM updates the client version for download weekly, regardless of the firmware version

    • The download is done as .zip file
    SSL Client Sourceforge.png
    Download from sourceforge.net as
    • Installer .exe
    • MSI file .msi
    • Portable version without installation .zip
    SSL-VPN Client GitHub.png
    Download at GitHub as
    • Installer .exe
    • MSI file .msi
    • Portable version without installation .zip
    • Source Code














    SSL-VPN CLient-exe.png

    Installation

    Installation is started by

    • Execute the file SSLVPNClient.exe with administrator rights'
      The setup also starts without admin rights, but then cannot start the required service afterwards
        
    • Opening the SSLVPNClient.msi file with startup parameters and with administrator rights'
      • Windows 10/11 - german
        msiexec /qn /i openvpn-client-installer-2.0.33.msi CWINVERSION=10
      • Windows 7 - german
        msiexec /qn /i openvpn-client-installer-2.0.33.msi CWINVERSION=7
      • Windows 10/11 - english
        msiexec /qn /i openvpn-client-installer-2.0.33.msi TRANSFORMS=":en-us.mst" CWINVERSION=10
      • Windows 7 - english
        msiexec /qn /i openvpn-client-installer-2.0.33.msi TRANSFORMS=":en-us.mst" CWINVERSION=7
  • If the property CWINVERSION is not specified, from client version 2.0.36 the tap driver for Windows 10/11 is installed!
    Up to version 2.0.35, the TAP driver for Windows 7 was installed by default.
      
  • Step-by-step.png
    SSL Installer Sprache.png
    Selecting the language of the installation wizard
    SSL Installer Willkommen.png
    Welcome message
    SSL Installer Lizenzbedingungen.png
    License terms
    SSL Installer Zielordner.png
    Choosing the destination folder
    SSL Installer Startmodus.png
    Start mode (default must be chosen!)
    SSL Installer Produktfunktionen.png
    Selection of product functions
    SSL Installer UAC.png
    Confirm UAC message
    SSL Installer Running-Reboot.png
    If the client is still running, it is necessary to restart the client.
    SSL Installer abgeschlossen.png
    Installation completed












    Update

  • The client automatically checks at each restart whether a new version is available - if so, it offers the download link.
  • Update from versions ≧ 2.0.26

  • When installing an update, the currently installed version should be closed, otherwise a reboot is required after installation

  • It is not necessary to uninstall the application.

  • Update from versions ≧ 2.0.26
    • Execute the installation file (.msi or .exe) with administrator rights as described under Installation.

  • Update from versions ≦ 2.0.25

    Update from versions ≦ 2.0.25

  • Uninstall the TAP network adapter
    • The signature for driver ≦2.0.25 has expired.
    • Windows does not update the driver signature during an update.
      As a result, they cannot be used.
    • The TAP driver must be uninstalled in this case before the update
      • Uninstalling with the device manager:
        The uninstallation is done via the context menu of the TAP network adapter in the device manager SSL Client TAP Gerät deinstallieren.png
  • Delete driver software for this device must be activated
  • Uninstalling with the command prompt (with administrator rights) (alternative)
    "C:\Program Files (x86)\Securepoint SSL VPN\bin\tapinstall.exe" remove tap0901
    • Afterwards the installation of the current version can be carried out
  • Update to versions ≧ 2.0.33

  • Update to versions ≧ 2.0.33
    As of version 2.0.33, the configuration is protected against unauthorized changes.
    An update may trigger a UAC (User Account Control) message to allow a change.
    A checksum is formed the first time it is used. This is then checked for further changes.
      



  • Display of the SSL client menu via the lock icon in the taskbar

    Open SSL VPN Client

    Display of the SSL client menu via the lock icon in the taskbar




    Start Parameter

    If the start parameter -noSave is appended to the file name, saving of the access data is prevented.
    For example, c:\Program Files (x86)\Securepoint SSL VPN\SSLVpnClient.exe
    will become
    c:\Program Files (x86)\Securepoint SSL VPN\SSLVpnClient.exe -noSave




    Choose configuration file

    Settings menu

    Import SSL VPN configuration

    • The settings menu can be used to import an SSL VPN configuration.


    • A .ovpn file is used as the source file.
    • The file name of the .ovpn file or a freely selectable text can be used as display name.
  • Import for versions ≧ 2.0.33
    As of version 2.0.33, the configuration is protected against unauthorized changes.
    When importing a configuration, a UAC (User Account Control) message may be triggered to allow a change.
    A checksum is formed the first time it is used. This is then checked for further changes.
      


  • SSL Client Verbindungs-Einstellungen.png
  • The same folder should also contain the *ca.pem, the certificate *cert.pem and the key *cert.key. These are then imported automatically.
    Otherwise, this information can be added by right-clicking on a created connection, Settings / Advanced / Tab General individual.



  • Start VPN connection automatically

    Start client on boot up

    Autostart

    • Click on the gear icon to access the {spc client settings




    Aktivate "Nutze Interact"

    Request OTP code extra

    In the VPN client, you can configure whether the OTP code should be requested separately:

    • Click on the cogwheel symbol to open the client settings.

    • Under the tab Connections, the function Use Interact must now be activated.




    Known Issues

    With the Windows version 21H1' (update as of May 2021), the tap driver may be rejected up to versions ≦ 2.0.33 because Microsoft has discontinued support for root certificates with kernel-mode signing in the Microsoft Trusted Root program. Thus, drivers with cross-signed certificates have lost their trust status.
    Solution:

    • Please install the latest SSL VPN client version 2.0.34 or later
      • Available from the Reseller Portal
      • In the user interface of the UTM from version 11.8.16.1 resp. 12.2
      • In the admin interface of the UTM in the menu Authentication User  Area User Button /  Area SSL-VPN Button Installer