HP Sa3110 - VPN Server Appliance Release Notes page 22

Using Mass Deployment Authentication
Password Twice
Reference Numbers 104125 and 104126DF
In a mass deployment of VPN Client software, the VPN
Client is installed using an encrypted vpnuser.ini file.
This section provides two ways to decrypt this file.
First, during installation following mass deployment, the
VPN Client asks you for the decryption key. The VPN
Client then decrypts the file and loads the tunnel
definitions, but if the vpnuser.ini file is opened through
a plain text editor, such as Notepad, it is still encrypted.
To change your logon password, you can go into the
directory where the user information is held, and delete
the solo.pwd file that stores the user's password. Then
you can load the VPN Client, enter the new password twice
(once in the logon window and once in the Verify
Password window) and then enter a decryption key.
What is unknown to you is that the decryption key has
changed. When the file was originally decrypted, it was
encrypted with your password. Thus, the new decryption
key is the user's old password.
Secondly, in a mass deployment, the notice of the
availability of the VPN Client software update includes a
unique authentication password, which is a randomly
generated alphanumeric sequence of characters.
The user is required to enter the authentication password
twice; first to log on to the Web site to obtain the update,
which is a zipped file. Then after the file is saved to the
user's hard drive and unzipped, when the installer is
running, the authentication password is required again to
have the vpnuser.ini part of the file decrypted.
Users are encouraged to use their local password when the
VPN Client Login window appears. The software
recognizes that this is not the authentication password and
then the user is prompted to enter the authentication
password in a second Authentication prompt window.
22
Hewlett-Packard SA3000 Series VPN Client