I’m looking for a way to password protect the .ovpn files downloaded from the RMS VPN Hubs. Currently when you download the files and add them to the OpenVPN app it will allow you to connect instantly without any username/password.
Is there any solution built into RMS or even a simple third party solution? I will need to give a sites VPN to a client soon and would like a way to ensure they need credentials to connect.
The .ovpn file downloaded from RMS already contains all the credentials required to authenticate to the RMS VPN Hub. By default, RMS OpenVPN uses certificate-based authentication, meaning no additional username or password is requested when the client connects.
To better assist you, could you please clarify your goal:
Are you looking to protect the .ovpn file itself (for example, to prevent unauthorized use if the file is copied), or
Do you want to change the authentication method, so that the VPN client must additionally enter a username and password when connecting?
A few important points that may help:
OpenVPN does not natively support password-protecting a .ovpn configuration file. If file protection is required, this would typically be handled at the operating system level (for example, disk encryption or user account permissions).
RMS VPN authentication is based on certificates managed by RMS. If a configuration file is compromised, the recommended action is to revoke and regenerate the VPN configuration from RMS.
RMS does not currently support adding interactive username/password authentication on top of the existing certificate-based VPN authentication.
Once you clarify which approach you are aiming for, I can provide more precise guidance on the best and most secure way to proceed.
“Do you want to change the authentication method, so that the VPN client must additionally enter a username and password when connecting?” Is the goal I have.
At this time, there is no functionality that allows entering the password automatically when connecting to RMS. If you are using the RMS VPN application, it allows you to log in to your account, but it does not prompt for a password every time you connect to the VPN.
Alternatively, you may consider using a third-party OpenVPN application that supports automatic password entry, which could help achieve the behavior you are looking for.