When using an RMS Users configuration file “.ovpn” to connect to a RUT140 VPN, the OpenVPN connection is established successfully, but no password is requested. Could this pose a security risk? I feel it would be more secure to require a username and password to secure the VPN. Is this possible?
Hello,
Thank you for the information provided.
When connecting using an RMS-generated .ovpn profile, authentication uses the client certificate and private key included in the profile. Therefore, the absence of a password prompt does not mean the connection is unauthenticated.
However, the configuration file should be treated as a sensitive credential. Anyone who obtains a copy may be able to connect with the access assigned to that VPN client, so please store it securely and avoid sharing it.
If you have any other questions, please feel free to ask.
Kind regards,
T.