---
title: 'Tutorial: How to Use the Access Server AWS Launcher'
canonical: https://openvpn.net/as-docs/tutorials/tutorial--how-to-use-aws-launcher/
product: Access Server Docs
description: Use the simple setup wizard to easily create a CloudFormation script that launches a pre-configured Access Server on AWS.
---

# Tutorial: How to Use the Access Server AWS Launcher

## Overview

Our simple setup wizard allows you to create a pre-configured Access Server for Amazon AWS and easily create a CloudFormation script directly on our site.

Follow these steps to launch Access Server with CloudFormation

## Step 1: Procure an Access Server subscription license

1. Sign in to the [Access Server portal](https://myaccount.openvpn.com/signin/as?product=as).
2. Click **Activation Keys**.
3. Get a free subscription for two VPN connections, or purchase one with more connections.
   - Your new subscription license and activation key are displayed under **Activation Keys**.

## Step 2: Use CloudFormation as the launch option

1. Click on **Install Access Server**.
2. Click **Amazon AWS** from the **Cloud provider (Iaas)** options.
   - The AWS installation page displays with **Deployment with CloudFormation Script**.

## Step 3: Launch with CloudFormation

1. Select your preferred **AWS region** from the drop-down.
2. Select your subscription from step 1.
3. Click **Launch Script on AWS** or click **Download the CloudFormation Script** to launch manually.

   > **Important**
   >
   > You may need to sign in to your AWS account.

   - AWS opens with **Quick create stack**.

## Step 4: Provide the needed parameters for the stack

1. Enter a **Stack name** or leave it as is.
2. Note that the **Activation Key** is populated.
3. Select your **VPC ID** and **Public Subnet ID**.
4. Adjust the **Instance Name** and **Instance Type** if needed.
5. Select a **Key Pair Name** for SSH access.
6. Check the box to acknowledge that **AWS CloudFormation might create IAM resources**.
7. Click **Create stack**.
   - **CREATE\_IN\_PROGRESS** displays, and you can monitor the progress until **CREATE\_COMPLETE** displays.

## Step 5: Access the Access Server Admin Web UI

1. After your new stack completes, click the **Outputs** tab.
2. Take note of the admin portal URL for the Admin Web UI and the password.
3. Click the URL to open the Admin Web UI.

   > **Note**
   >
   > A browser warning displays for the self-signed certificate. Click to proceed.
   >
   > We recommend eventually replacing Access Server's web services certificate with your own, verified SSL.
4. Sign in with the **openvpn** username and the provided, randomly generated password.
5. Review and click **Agree** for the EULA.
6. After successful authentication, change the temporary password:
   1. Click **User Management \> User Permissions**.
   2. Click **More Settings** for the user, **openvpn**.
   3. Enter a new password in the **Local Password** field.
   4. Select **Save Settings** and **Update Running Server**.
7. You can now complete the configuration for your network. Refer to our [Setup Guide](https://openvpn.net/as-docs/first-time-setup.md) for documentation resources.

## Troubleshooting

**Issue:** Key Pair (or other parameter) doesn't display as an option in the drop-down.

**Resolution:** Ensure that you have the key pair, VPC, subnet, or other parameter in the same AWS region that you selected for your CloudFormation script.

---

Prev: [Deployment and Infrastructure Options](https://openvpn.net/as-docs/tutorials/deployment-and-infrastructure-options.md)
Next: [Tutorial: Deploy Access Server on Kubernetes with Helm](https://openvpn.net/as-docs/tutorials/tutorial--deploy-on-kubernetes-with-helm.md)
Index: https://openvpn.net/as-docs/llms.txt