Tutorial: Select the TLS Level for the OpenVPN Daemons
Overview
Access Server uses TLS ot secure VPN daemon connections. TLS 1.0 and 1.1 are outdated and insecure, and are no longer recommended. If your deployment includes legacy OpenVPN clients that don't support TLS 1.2 or newer (e.g., clients from 2014 or earlier), they will fail to connect unless the server is explicitly configured to allow older TLS versions.
Default TLS settings by version
Scenario | Default minimum TLS version |
|---|---|
New installation on Access Server 3.2.0 or newer | TLS 1.3 |
Upgrade from Access Server 3.1.x or earlier | Retains previous setting (TLS 1.2 unless manually changed) |
New installation on Access Server 2.1.12-3.1.x | TLS 1.2 |
Important considerations
Client Compatibility: Ensure all client software supports the desired TLS version before changing this setting.
Connection Profiles: Changing the TLS version may require updated connection profiles or client software updates.
Prerequisites
Installed Access Server.
Admin Web UI access or console access with root privileges.