--- title: Release Notes for OpenVPN Connect on Windows canonical: https://openvpn.net/connect-docs/windows-release-notes/ product: OpenVPN Connect Docs --- # Release Notes for OpenVPN Connect on Windows ## SHA 256 checksums | **File Name** | **SHA256SUM** | | --- | --- | | ``` x64: openvpn-connect-3.9.0.5008_signed.msi ``` | ``` 31347812dd37dbbb69bc47de842eb179827266e9dfb45e7f6ce10c5d71a5bad6 ``` | | ``` x32: openvpn-connect-3.9.0.5008_signed_x86.msi ``` | ``` 25f7b77adf61f3856b9079e0b1bc1968e98980215f9dc72e89e8587f141d5524 ``` | ### Calculate the checksum of your downloaded file To calculate the checksum of your downloaded file on Windows, follow these steps based on the tool you're using: #### Using PowerShell 1. Open PowerShell. 2. Run the following command, replacing `C:\Users\\Downloads\` with the file's path: ``` Get-FileHash C:\Users\\Downloads\ ``` Example: ``` Get-FileHash C:\Users\Owen\Downloads\openvpn-connect-3.6.0.4074_signed.msi ``` 3. The `Hash` column in the output will display the file's SHA256 checksum. Compare it with the one provided here to confirm the file's integrity. #### Using Command Prompt (CMD) 1. Open Command Prompt. 2. Run the following command, replacing `C:\Users\\Downloads\` with the file's path: ``` certUtil -hashfile C:\Users\\Downloads\ SHA256 ``` Example: ``` certUtil -hashfile C:\Users\Owen\Downloads\openvpn-connect-3.6.0.4074_signed.msi SHA256 ``` 3. The SHA256 hash of the file will be displayed. Compare it with the one provided here to confirm the file's integrity. ## 3.9.0 (5008) > **Note** > > **Release date:** > > **Jun 8, 2026** ### Features and improvements - Connect to your network before signing in to Windows. - System connection profiles provided by your administrator appear directly on the Windows sign-in screen. - After signing in, your active VPN connection remains available and can be managed in OpenVPN Connect without reconnecting. - Supports username/password authentication, multi-factor authentication (MFA) using one-time passwords (OTP), and SAML authentication. - Fixed minor issues and improved stability. ### Limitations - [Pre-Login Connect](https://openvpn.net/connect-docs/windows-pre-login-connect-plc.md) needs to be enabled by your administrator. It requires service installation and system profile provisioning. No additional configuration is required by end users. - Available on Windows only. - Device Posture Checks (DPC) aren't available for pre-sign-in connections. - Certificate-based authentication using External Public Key Infrastructure (ePKI) isn't supported. - SAML authentication on the sign-in screen is performed via a QR code. - Network speed statistics aren't displayed for pre-sign-in connections. ## 3.8.0 (4528) > **Note** > > **Release date:** > > **Sep 18, 2025** - The application's user interface has been reworked to provide a modern design and a more intuitive user experience - The **Shortcut Minimize** setting is now renamed to **Minimize on launch** , and functionality is combined with **Launch Options**. - Added possibility to import or pre-save server URL/CloudID via Global Config or manually after first successful profile import — [Global Configuration File Support for Windows](https://openvpn.net/connect-docs/windows-global-configuration-file-support.md). - Updated DCO driver to 1.3.3. - Fixed an issue that occurred when the app restored a deleted profile while the tray menu was in use. - Fixed the confirmation message for successful import operations of Global Config via CLI. - Fixed an issue where the client-side script dialog persists on the connection after the server stops pushing it. - Fixed a bug that caused the taskbar icon to not respond after recovering from hibernation. - Known issue: The application may hang during the process of importing a profile from a URL if the application was manually closed by the user after the browser authentication step. This most commonly occurs in a virtual machine environment. ## 3.7.3 (4351) > **Note** > > **Release date:** > > **Jul 18, 2025** - DCO driver updated to version 1.3.1. - Minor improvements and fixes. ## 3.7.2 (4253) > **Note** > > **Release date:** > > **May 12, 2025** - Fixed "Allow using local DNS resolvers" setting issue. ## 3.7.1 (4243) > **Note** > > **Release date:** > > **May 5, 2025** - OpenVPN was upgraded to version 3.11.1. - OpenSSL and several other code libraries were also updated. - The connector service was updated to version 1.2, with additional connection settings. Refer to [Use OpenVPN Connect v3 on Windows in Service Daemon Mode](https://openvpn.net/connect-docs/tutorials/windows-connect-service-daemon-mode.md). - Fixed an issue where the connection wouldn't restore after switching networks in service daemon mode. - Implemented pre-connection checks to ensure network drivers and the system service are installed and running, and not used by other services. - Minor fixes and improvements. ## 3.6.0 (4074) > **Note** > > **Release date:** > > **Dec 20, 2024** - Added support of "Global Config" feature that allows configuring the app settings, importing profiles, and creating proxies by applying the single file. Refer to [Global Configuration File Support for Windows](https://openvpn.net/connect-docs/windows-global-configuration-file-support.md). - Fixed an issue when software update notifications for OpenVPN Connect aren't shown to the user. - Fixed an issue when username, passwords, and certs, aren't correctly saved if they're saved on the Imported Profile screen. - Small fixes and improvements. ## 3.5.1 (3946) > **Note** > > **Release date:** > > **Oct 17, 2024** - Updated information exchange for CloudConnexa users. - Introduced a new dialog for profiles with ‘auth-nocache’ and ‘auth-user-pass’ directives. - Minor fixes and improvements. ## 3.5.0 (3818) > **Note** > > **Release date:** **Jul 18, 2024** - Application can't be installed on Windows 7 or 8. - Implemented **Device Posture Checks** feature. > **Note** > > Businesses can now ensure that only devices that meet certain security standards access the network. This can help protect the network from unauthorized access and malware infections. - Added Forced Re-authentication support. - Enhanced DNS stability and productivity (support for new DNS option). - Connection through proxy with basic auth is now only allowed with "insecure" security level. - Updated TAP and DCO network drivers. - Introduced support for external EC (elliptic serves signature algorithms) certificates. - Certificate validation added on Import and Connection (not allowed to import or connect with expired certificates). - Renamed the **Allow IPv6** setting to **Block IPv6** to more clearly reflect its behavior. - External certificates are non-exportable. - Updated the **Import Profiles** screen. - Introduced UV\_UUID reporting in service mode. - Application Installer now blocks the process on unsupported OS versions. - Other minor fixes and improvements. ## 3.4.4 (3412) > **Note** > > **Release date:** **Feb 8, 2024** - Fixed ELECTRON\_RUN\_AS\_NODE vulnerability ([CVE-2023-7245](https://www.cve.org/CVERecord?id=CVE-2023-7245)). Reported by Mykola Grymalyuk (RIPEDA Consulting). - Improved web authentication dialog. - Fixed issue with environment variable in GUI. - Fixed issue with empty Device ID reported to VPN server. - Fixed issue when a system browser doesn't open during authentication with AS SAML on clean installed Windows 11. - Fixed UI issues in High Contrast mode. ## 3.4.3 (3337) > **Note** > > **Release date:** **Dec 7, 2023** - **Dropped official support for Windows 8 (may still work but no support is provided for it anymore).** - Promoted DCO feature to stable (no longer in beta). - Fixed security issue CVE-2023-4863 by updating relevant libraries. - Fixed regression where DNS zones were not applied correctly. - Improved handling of unwanted 0.0.0.0/0 route added by Windows operating system. - Updated handling of browser-based authentication - embedded browser and OPEN\_URL no longer supported. ## 3.4.2 (3160) > **Note** > > **Release date:** **Aug 24, 2023** - Fixed issue where some antivirus solutions could trigger a false positive report. ## 3.4.1 (3150) > **Note** > > **Release date:** **Aug 17, 2023** - Added support for "all" OS type (Windows and macOS) of environment variables for Access Server. - Fixed connectivity issue using Dual-Stack IPv6/IPv4. - Fixed issue where "pull" directive was incorrectly marked as incompatible option. - Fixed issue where password input could lose focus. - Various bug fixes and user experience improvements. ## 3.4.0 (3121) > **Note** > > **Release date:** **Jul 10, 2023** - Added OpenVPN Data Channel Offload (DCO) support. - Added support for environment variables for Access Server. - Added ARM platform support via compatibility mode. - Added "Security Level" setting. - Updated OpenVPN 3 library to version 3.8.0. - Updated OpenSSL library to version 3.0.8. - Removed onboarding screens. - Fixed security issue [CVE-2022-3761](https://www.cve.org/CVERecord?id=CVE-2022-3761) with checking web certificates during import process. Thanks to Mr. Ka Lok Wu of the Chinese University of Hong Kong for reporting this.. - Fixed a bug when importing profile from a server with Let’s Encrypt certificate. - Fixed the issue with numeric pad enter button not working. - Fixed the issue with the installation process related to a lockfile present in TEMP folder. - Various bug fixes and user experience improvements. ## 3.3.7 (2979) > **Note** > > **Release date:** **Feb 16, 2023** - Updated information exchange for CloudConnexa users. ## 3.3.6 (2752) > **Note** > > **Release date:** **Mar 22, 2022** - OpenSSL updated to 1.1.1n (to address CVE-2022-0778). - Minor change for Web Authentication in a system browser. ## 3.3.5 (2717) > **Note** > > **Release date:** **Mar 9, 2022** - Added import using Web Authentication in system browser. - Added reporting of UUID device identifier as UV\_UUID parameter. ## 3.3.4 (2600) > **Note** > > **Release date:** **Dec 16, 2021** - Resolved a bug when importing CloudConnexa profiles. ## 3.3.3 (2562) > **Note** > > **Release date:** **Nov 17, 2021** - Changed Web Auth flow to use external browser for authentication. ## 3.3.2 (2475) > **Note** > > **Release date:** **Oct 7, 2021** - Updated OpenSSL library to 1.1.1 version. - Added support of local DNS resolvers. - Added Device ID on Settings page. - Added Confirmation Dialogs setting. - Fixed UI issues on Windows 11. - Various bug fixes and improvements. ## 3.3.1 (2222) > **Note** > > **Release date:** **Jun 23, 2021** - Resolved a security issue related to OpenSSL configuration ([CVE-2021-3613](https://www.cve.org/CVERecord?id=CVE-2021-3613)) reported by Xavier Danest. ## 3.3.0 (2171) > **Note** > > **Release date:** **Jun 3, 2021** - Updated OpenVPN 3 library to 3.6.2 version. - Added captive portal detection: OpenVPN Connect notifies the user when a device is connected to a network with a captive portal enabled. This functionality is enabled by default and can be managed on the Settings screen in the app. - Added network loss detection: the VPN connection goes to a “pause” state when a network connection is lost, and automatically resumes the VPN session when the network is up. - Added command line interface. Refer to [Manage OpenVPN Connect from the Command Line](https://openvpn.net/connect-docs/command-line-functionality-windows.md) (Windows) or [Manage OpenVPN Connect from the Command Line](https://openvpn.net/connect-docs/command-line-functionality-macos.md) (macOS). - Changes to software update functionality: - Added the ability to change the setting of the frequency of software update checks. - Added update checks frequency management by the admin using the directive to the profile: 0 is never; 1 is every day; 7 is once a week; and 30 is monthly. When a profile with this directive is bundled into the app, the app setting changes automatically. `CONNECTV3_PREFERENCE_UPDATE_FREQUENCY=<0|1|7|30>` - When a new version of the application is available, it becomes visible in the main menu of the app. - Added release notes to notification of application updates. - Added support for PKCS11 hardware tokens. Refer to [Connect and Authorize Hardware Tokens](https://openvpn.net/connect-docs/connect-and-authorize-hardware-tokens.md). - Replaced reconnect on reboot setting with launch options. A user can choose multiple options: startup application after OS reboot, connect with the latest connected profile, or connect only if a connection was active during the reboot (previously, behavior of “Reconnect on Reboot” setting). - Added external certificates on Windows 7: OpenVPN Connect supports importing and assigning an external PKCS12 identity to a profile for connection in Windows 7. - Added an Advanced Settings section. Settings that can break connectivity are hidden in the Advanced Settings section on the Settings screen. - Added colorful tray icons. The OpenVPN Connect tray icon with a color indication of connection state can be enabled on the Settings screen (default behavior on Windows 7 and Windows 8). - Removed the "force AES-CBC cipher" legacy compatibility option. - Various bug fixes and UX improvements.Release notes for 3.2.3 (1851) ## 3.2.3 (1851) > **Note** > > **Release date:** **Feb 25, 2021** - Added support for deep linking and web authentication using system web browser. - Removed optional wintun driver support. ## 3.2.2 (1455) > **Note** > > **Release date:** **Oct 30, 2020** - Minor changes for Web Auth flow. - Added reporting UV\_APP\_VER values to the VPN server. - Implemented a new way of profile bundling (distribution of MSI and profile as separate files). - Fixed an issue where an OpenVPN server could not be reached if it was not reachable through the default gateway. - Fixed an issue where a large number of routes pushed to the VPN client would cause the client to fail. - Fixed issues with the display of the application version. ## 3.2.1 (1180) > **Note** > > **Release date:** **Aug 26, 2020** - Added reporting UV\_ASCLI\_VER and UV\_PLAT\_REL values to the VPN server. - Fixed not prompting user for certificate approval under certain conditions. - Updated Wintun driver to v0.8.1 that contains a patch for a driver update issue. - Added installer routine that ensures presence of a particular Windows hotfix on Windows 7 machines (KB2921916).Release notes for 3.2.0 (1064) ## 3.2.0 (1064) > **Note** > > **Release date:** **Jul 13, 2020** > > This is now a stable release and no longer considered beta software. - **As part of the transition from Mbed TLS to OpenSSL the list of negotiable TLS cipher suites no longer includes weak cipher suites that lack forward secrecy support (DH/ECDH).** - Switchover from Mbed TLS library to OpenSSL library. - Support of TLS 1.3 version. - Support signing with RSA-PSS signatures during TLS handshake. - Update of OpenVPN3 library to OpenVPN core 3.5.6 version. - Optional WinTun driver is available during installation. - Implemented possibility to [run VPN connection as system service](https://openvpn.net/connect-docs/tutorials/windows-connect-service-daemon-mode.md). - Improved stability and performance. ## 3.1.3 (713) beta - Updated MbedTLS to 2.7.13 to resolve a security issue ([CVE-2019-18222](https://www.cve.org/CVERecord?id=CVE-2019-18222)). ## 3.1.2 (572) beta - Fixed a failure of installation process on some operating systems with non-English localization. ## 3.1.1 (378) beta - Implemented a fix for a security issue related to the location of installation files ([CVE-2020-9442](https://www.cve.org/CVERecord?id=CVE-2020-9442)). ## 3.1.0 (361) beta - New profile import flow with WebAuth support. - Added EULA license during installation. - Added .ovpn file association. - Added possibility to connect without external certificate when the client certificate is not required. - Fixed connection with DUO authentication service. - Fixed connection via server-locked profile with 2FA. - Fixed proxy basic authentication. - Fixed issue with long client-side scripts. - Fixed issue with unquoted path privilege escalation reported by Yogesh Prasad ([CVE-2014-5455](https://www.cve.org/CVERecord?id=CVE-2014-5455)). ## 3.0.0 (272) beta - New unified UI with 2 color scheme options. - Dropped support of MD5 algorithm. - Disabled tunnel compression by default (could be enabled back in the app settings). - Ability to add proxies for connection from within the app. - Ability to manage external certificates directly from within the app (except in Windows 7 for the moment). - Separate screen with extended statistics of connection session. - Log File with options to pause/resume, clear and save logs for sharing. - Plenty of other settings like reconnect on reboot, seamless tunnel, IP/TLS versions etc. - Ability to create connect and disconnect shortcuts. ## OpenVPN Connect v2 ### 2.7.1.111 > **Note** > > **Release date:** **Oct 22, 2020** - Added support for tls-crypt (v1 and v2) ### 2.7.1.110 > **Note** > > **Release date:** **May 27, 2020** - Resolved an issue where DNS records were not being deleted properly in some rare cases. ### 2.7.1.108 > **Note** > > **Release date:** **Apr 29, 2020** - Resolved some issues on Windows with driver signing. ### 2.7.1.107 > **Note** > > **Release date:** **Apr 10, 2020** - Added multi-factor support for the dynamic challenge/response model. - Updated TAP driver to latest version and signed with latest driver signing certificate. - Updated MbedTLS to 2.7.13 to resolve a security issue ([CVE-2019-18222](https://www.cve.org/CVERecord?id=CVE-2019-18222)). - Improved round-robin DNS server exclusion route handling. - Resolved a problem where ’empty credentials’ error could occur. - Resolved some various other minor stability issues. ### 2.7.1.104 > **Note** > > **Release date:** **Jan 22, 2020** - Resolved an issue where DNS records were not being deleted properly in some rare cases. - Resolved a problem with saving connection profiles when using a Windows username that contains non-latin characters. ### 2.7.1.101 > **Note** > > **Release date:** **Mar 11, 2019** - Signed this build with a new software publisher EV certificate valid until 23-2-2022, as the old certificate had expired. - Resolved a problem where reconnect would fail on a round-robin DNS hostname as server address in combination with full-tunnel redirection. ### 2.6.0.100 > **Note** > > **Release date:** **Dec 11, 2018** - Added DHCP option PROXY\_AUTO\_CONFIG\_URL capability for proxy auto configuration (PAC) in the operating system. It is now possible to do for example: - push "dhcp-option PROXY\_AUTO\_CONFIG\_URL (url to proxy PAC settings file)" - DNS default suffix pushed by the VPN server should now have priority when the client already had a DNS default suffix set locally. ### 2.5.0.136 > **Note** > > **Release date:** **Apr 18, 2018** - Fixed launch issue on some older Windows platforms when Microsoft Visual C++ redistributable wasn't present. - Fixed and improved platform and client version reporting to the server. ### 2.5.0.120 > **Note** > > **Release date:** **Mar 22, 2018** - mbedTLS: fix incompatibility with PKI created by OpenSSL 1.1. - mbedTLS: add support for ECDSA. - mbedTLS: updated to fix CVE-2018-0487 vulnerability. - Issue OpenVPN client showing 'no VPN servers' when a connection profile with an excessively long server host name was loaded is now fixed. - TLS key refresh (TLS soft reset) connection interruption when using --opt-verify is now fixed. --- Prev: [Release Notes](https://openvpn.net/connect-docs/release-notes.md) Next: [macOS Release Notes](https://openvpn.net/connect-docs/macos-release-notes.md) Index: https://openvpn.net/connect-docs/llms.txt