--- title: Managing Access Server's VPN Web Services canonical: https://openvpn.net/as-docs/web-services/ product: Access Server Docs --- # Managing Access Server's VPN Web Services This topic describes the web services provided by Access Server. The Admin Web UI lets you easily manage and configure your VPN server, with or without Linux knowledge. The Client Web UI lets users download pre-configured VPN clients and connection profiles easily. ## The Admin and Client Web UIs Access Server has a web interface that hosts two main components: the Admin Web UI and the Client Web UI. You can find more information about these services from these resources: - [The Admin Web UI User Manual](https://openvpn.net/as-docs/admin-web-ui-user-manual.md) - [The Client Web UI User Manual](https://openvpn.net/as-docs/client-web-ui-user-manual-78629.md) - [Web Server URLs](https://openvpn.net/as-docs/web-server-urls.md) - [Admin Web UI](https://openvpn.net/as-docs/first-time-admin-web-ui.md) ## Managing web services with the Admin Web UI The Admin Web UI provides configuration settings for the web services on the **Web Server** and **CWS Settings** pages. On the **Web Server** page, you can configure [certificates and keys](https://openvpn.net/as-docs/tutorials/tutorial--install-ssl-certificate.md) for Access Server's web server. This is where you upload SSL certificates and bundles to replace the self-signed certificate Access Server starts with. We recommend setting this up with your [custom hostname](https://openvpn.net/as-docs/tutorials/tutorial--custom-hostname.md). On the **CWS Settings** page, you can configure access to the web services. Refer to the [user manual](https://openvpn.net/as-docs/configuration/#cws-settings) for more information. ## Customizing the look of the Admin and Client Web UIs You can add your logo and other customizations to the user interfaces. For more information, refer to this tutorial: [How to Change the Branding on the Admin and Client Web UIs](https://openvpn.net/as-docs/tutorials/tutorial--web-server-logo-branding.md). ## Managing settings for the web services from the command line You can also manage your web services from the console using the command-line interface (CLI). We provide the following tutorials. ### Installing a signed SSL certificate Follow this tutorial to install a signed certificate, private key, and intermediary file from the CLI: - [Install a Signed SSL Certificate from the Command-line Interface](https://openvpn.net/as-docs/tutorials/tutorial--ssl-certificate-command-line.md) ### Branding — change the logo on the web interface Access Server supports the following branding options: 1. Displaying your business logo on the Admin and Client Web UI login screens. 2. Adding a description text string to display on the Admin Web UI. 3. Removing the “powered by OpenVPN” footer. Follow this tutorial to make these changes: - [How to Change the Branding on the Admin and Client Web UIs](https://openvpn.net/as-docs/tutorials/tutorial--web-server-logo-branding.md) > **Note** > > There are no branding options for our free VPN client, OpenVPN Connect. ### Web server identification string You can change the "Server" HTTP header that the Access Server's built-in web server uses to identify itself to clients (browsers). - [How to Set a Custom Web Server Name](https://openvpn.net/as-docs/tutorials/tutorial--custom-web-server-name.md) ### Specify custom HTTP headers The web server built into Access Server 2.9.4 and newer can be provided with additional HTTP headers. This is useful when security scanners test the web interface and require certain headers to be present. You can set multiple headers by specifying multiple configuration keys. - [Specify Custom HTTP Headers](https://openvpn.net/as-docs/tutorials/tutorial--custom-http-headers.md) ### Web session timeout When you authenticate to Access Server's Client Web UI (or client web service, CWS) or Admin Web UI (or admin web services, AWS), your session remains active for a set timeframe. You remain signed in while you're actively using the web page, but your session expires if you're inactive for 30 minutes. - [How to Change the Web Session Timeout](https://openvpn.net/as-docs/tutorials/tutorial--web-session-timeout.md) ### Selecting a custom cipher suite string for the web server HTTPS-protected web services must define which encryption ciphers they support. This is a balance of security versus compatibility. The strongest security makes the web interface inaccessible on older platforms. We try to choose a default Access Server setting that supports current operating systems and browsers. You can adjust the cipher suite string for your needs. - [Harden the Web Server Cipher Suite String](https://openvpn.net/as-docs/tutorials/tutorial--harden-web-server-cipher-suite-string/#tutorial--harden-the-web-server-cipher-suite-string) ### Selecting SSL and TLS levels on the web server You can adjust the TLS settings for the Access Server web server from the Admin Web UI or command-line interface (CLI). - [Select the SSL and TLS Levels on the Web Server](https://openvpn.net/as-docs/tutorials/tutorial--tls-web-server.md) ### Set the interface and ports for the web services When installing Access Server, the web services and OpenVPN daemons listen on all interfaces by default. You can change this in the Admin Web UI or the command-line interface (CLI), which are covered here. - [Set the Interface and Ports for the Web Services](https://openvpn.net/as-docs/tutorials/tutorial--web-services-interface-and-ports.md) ### Change the web service forwarding settings The OpenVPN TCP daemon and the web services are connected. This is done with service forwarding, which internally redirects web browser requests made to the OpenVPN TCP daemon, running on the default HTTPS port TCP 443, to where the web services are actually running. - [Change the Web Service Forwarding Settings](https://openvpn.net/as-docs/tutorials/tutorial--web-services-forwarding.md) ## Troubleshooting the web service Refer to [Web Interface Access](https://openvpn.net/as-docs/web-interface.md). --- Prev: [Using the Client Web UI for Access Server](https://openvpn.net/as-docs/using-the-client-web-ui.md) Next: [Network Topology](https://openvpn.net/as-docs/network-topology.md) Index: https://openvpn.net/as-docs/llms.txt