Skip to main content
These steps are typically performed by the OpenVPN Access Server Admin. See Underlying Responsibility Roles for more information.
In this section, we’ll download a user-locked or auto-login connection profile for an existing user. If you need to create a new user, please refer to OpenVPN’s documentation, which covers Creating Users and User Groups for VPN Connections.

​
Admin Web UI Method

1
Log in to the OpenVPN Access Server Admin Web UI.Example: https://<HOSTNAME_OR_IP>:943/adminPort 943 is the default port for the OpenVPN Access Server Admin Web UI.
2
On the left-hand menu, navigate to Users.
3
On the line for the user you want to download the profile for, click on the More actions (3 vertical dots) button > Download profile.
4
In the Generate new client connection profile menu:
  • Select the Profile type:
    • User-locked: The profile is locked to the user and cannot be used by any other user. This is the default option.
    • Auto-login: The profile contains the user’s credentials and can be used by anyone who has access to the file. This option is not recommended for security reasons.
  • Add a comment if desired.
  • Click on Download.
5
The .ovpn file will be downloaded to your local machine.

​
Admin CLI Method (sacli)

1
Connect to your Access Server via SSH and get root privileges.
ssh your-access-server
sudo -i
2
Create a new Client Profile for your VPN user:
/usr/local/openvpn_as/scripts/sacli --prefer-tls-crypt-v2 --user futurex_user GetUserlogin > futurex_profile.ovpn
Replace futurex_user with the actual VPN username and futurex_profile with your desired profile name.
The --prefer-tls-crypt-v2 flag enables TLS crypt v2 for improved security. This is recommended for all new client profiles.