Tavve zoneranger User Manual page 384

Starting the OpenVPN Client Manually
If you prefer to run the OpenVPN client manually, copy the following files from the rgvi directory
on the Ranger Gateway install CD to the C:\Program Files\OpenVPN\config directory:
•
rgviClient.conf
•
rgviClient.crt
After the files have been copied, you will need to edit the rgviClient.conf file to specify the
list of Ranger Gateway candidates, as described above. Once this step has been completed, you can
run the OpenVPN client by executing the following commands:
cd C:\Program Files\OpenVPN\config
..\bin\openvpn rgviClient.conf
The rgviClient.crt file is password-protected, so when OpenVPN is started, you will be
prompted to enter the password. The password for the default rgviClient.crt file is rgvi .
Note that the Ranger Gateway should be running and the RGVI service should be enabled and
configured to accept connections from this client before the RGVI client is started. You can verify
that the RGVI client has successfully started and connected to the RGVI service on the Ranger
Gateway by verifying that the IP address associated with RGVI client is listed in the output of the
following command (executed on the Ranger Gateway server):
$RangerGatewayInstallDir\bin\rgvi status
Running the OpenVPN Client as a Windows Service
If you prefer to run the OpenVPN client as a Windows service, copy the following files from the
directory
rgvi
Files\OpenVPN\config
•
rgviClientWindowsService.ovpn
•
rgviClientWindowsService.p12
•
tavveCA.crt
•
LocalComputerAccountPersonalCertificatesConsole.msc
After copying these files, you will need to edit the rgviClientWindowsService.ovpn file to
specify the list of Ranger Gateway candidates, as described above. Note that you should remove any
other files with the .ovpn extension in the config directory before starting the OpenVPN service.
Note that the rgviClientWindowsService.p12 file is password-protected, but there is no
way to specify the required password at the point when the OpenVPN service is started. The
recommended
rgviClientWindowsService.p12
following steps:
1. Open the pre-configured certificate management console, by executing the following
commands:
2. The Local Computer Account Personal Certificates console window will open, as shown in
the following figure.
ZoneRanger 5.5 User's Guide
on the Ranger
directory:
solution is to load
cd C:\Program Files\OpenVPN\config
mmc LocalComputerAccountPersonalCertificatesConsole.msc
Gateway install CD
the key and certificate
file into the Windows Certificate Store, using the
to the
C:\Program
information from the
384