Tutorial: How to Replace the Legacy openvpn Administrative Account⁠

Start by upgrading your Access Server to the latest version: Tutorial: Update Your Access Server Version.

The next step is to delete the bootstrap openvpn account. This account is also a bootstrap account specified in the as.conf file, in addition to being a user on the Linux operating system.

1. Sign on to your console or connect via SSH.

2. Edit the as.conf file:

   nano /usr/local/openvpn_as/etc/as.conf

3. Comment out the bootstrap openvpn account. The line will look like this:

   # boot_pam_users.0=openvpn

4. Save and exit.

5. Remove the bootstrap account from your operating system:

   deluser openvpn

6. Restart the Access Server service for the changes to take effect:

   systemctl restart openvpnas

Create a new local administrative account:

1. Run these commands to create a new openvpn local administrative account with a specified password:

   sacli --user "openvpn" --key "prop_superuser" --value "true" UserPropPut
   sacli --user "openvpn" --key "user_auth_type" --value "local" UserPropPut
   sacli --user "openvpn" --new_pass '<PASSWORD>' SetLocalPassword
   sacli start

   1. 1

      This sets the username, openvpn. You can set a different name if you prefer.

   2. 2

      This sets the password.

You should now be able to sign in to the Admin Web UI with the new local administrative account and the specified password.

1. Open a web browser and navigate to the Admin Web UI.

2. Enter your new admin user's credentials.

   • You should successfully sign in.