Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.futurex.com/llms.txt

Use this file to discover all available pages before exploring further.

These steps are typically performed by the OpenVPN Access Server Admin. See Underlying Responsibility Roles for more information.
In this section, we’ll download a user-locked or auto-login connection profile for an existing user. If you need to create a new user, please refer to OpenVPN’s documentation, which covers Creating Users and User Groups for VPN Connections.

Admin Web UI Method

1
Log in to the OpenVPN Access Server Admin Web UI.Example: https://<HOSTNAME_OR_IP>:943/adminPort 943 is the default port for the OpenVPN Access Server Admin Web UI.
2
On the left-hand menu, navigate to Users.
3
On the line for the user you want to download the profile for, click on the More actions (3 vertical dots) button > Download profile.
4
In the Generate new client connection profile menu:
  • Select the Profile type:
    • User-locked: The profile is locked to the user and cannot be used by any other user. This is the default option.
    • Auto-login: The profile contains the user’s credentials and can be used by anyone who has access to the file. This option is not recommended for security reasons.
  • Add a comment if desired.
  • Click on Download.
5
The .ovpn file will be downloaded to your local machine.

Admin CLI Method (sacli)

1
Connect to your Access Server via SSH and get root privileges.
ssh your-access-server
sudo -i
2
Create a new Client Profile for your VPN user:
/usr/local/openvpn_as/scripts/sacli --prefer-tls-crypt-v2 --user futurex_user GetUserlogin > futurex_profile.ovpn
Replace futurex_user with the actual VPN username and futurex_profile with your desired profile name.
The --prefer-tls-crypt-v2 flag enables TLS crypt v2 for improved security. This is recommended for all new client profiles.