OpenVPN Access Server System Administrator Guide

Note that if you ever have to remove the OpenVPN Access Server package, the command to use is
one of the following:
For Fedora/CentOS/RHEL hosts:
rpm –e openvpn-as
For Ubuntu hosts:
dpkg –r openvpn-as
3.4 Run ovpn-init
OpenVPN Access Server is initially configured using an interactive configuration utility called
ovpn-init. This utility prompts the administrator with a few questions in order to construct the
desired Access Server initial configuration. Versions 1.6+ Already run this tool to the default
settings, if you have a need to run it again you can use the following command:
/usr/local/openvpn_as/bin/ovpn-init --force
ovpn-init
OpenVPN Access Server
Initial Configuration Tool
------------------------------------------------------
OpenVPN Access Server End User License Agreement (OpenVPN-AS EULA)
1. Copyright Notice: OpenVPN Access Server License;
Copyright (c) 2010 OpenVPN Technologies, Inc.. All rights reserved.
2. Redistribution of OpenVPN Access Server binary forms and documents,
are permitted provided that redistributions of OpenVPN Access Server
binary forms and documents must reproduce the above copyright notice.
3. You agree not to reverse engineer, decompile, disassemble, modify,
translate, make any attempt to discover the source code of this software,
or create derivative works from this software.
4. THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESSED OR IMPLIED
WARRANTIES,INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
EVENT SHALL OPENVPN TECHNOLOGIES, INC BE LIABLE FOR ANY DIRECT, INDIRECT,
INCIDENTAL,SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Please enter 'yes' to indicate your agreement [no]:
If you have already run ovpn-init previously, you will instead see an error message and ovpninit
will exit immediately:
Error: ovpn-init has already been run on this system. Use --force option.
You can force ovpn-init to re-initialize the Access Server configuration by running “ovpn-init –
force”. Note that this will re-generate all keys and certificates used by Access Server and restore
the configuration to the initial defaults.
Will this be the primary Access Server node?
(enter ‘no’ to configure as a backup or standby node)
> Press ENTER for default[yes]:
OpenVPN Access Server System Administrator Guide
11