Tutorial: Change the TLS Session Renegotiation Interval⁠

Overview⁠

This tutorial demonstrates how to modify the connection security refresh interval for TLS sessions using either the Admin Web UI or the command-line interface (CLI).

For security purposes, Access Server renegotiates the TLS session and encryption key used for an OpenVPN session at regular intervals. The server or client can trigger the renegotiation.

This renegotiation doesn't impact your Access Server end users, as a valid session token is used as an authentication proxy.

As of Access Server 2.9.3, the renegotiation default value is 60 minutes (1 hour). Previous versions used 360 minutes (6 hours). When you upgrade Access Server from an older version, the renegotiation value stays the same.