Tutorial: How to Replace 1024-bit VPN Certificates for Access Server
Overview
This tutorial explains how to replace insecure 1024-bit VPN certificates with stronger ones for Access Server. With Access Server versions 2.9.2 and newer, you may encounter a warning message about legacy 1024-bit CA certificates, which are no longer considered secure. This guide will help you create a new CA certificate, migrate your VPN clients, and remove old certificates in a way that minimizes disruption to your users.
Prerequisites
An installed Access Server version 2.9.2 or newer.
Console access and get root privileges.
A server configuration backup.
Understanding that changes will temporarily disconnect VPN clients.