Difference between a server-locked profile and a user-locked profile?

Danran

In CWS, there are server-locked-profiles, and user-locked-profiles. I cannot find any documentation on these, and would appreciate it if anyone could please explain the difference between the two.

Thanks!

s0p4L1N

From what I have already experienced on OpenVPN on pfSense is:

- server-locked-profiles: one ovpn conf file for all users

- user-locked-profiles: one ovpn conf file for each user

On pfsense, we had OpenVPN with Radius + OTP authentication and then, all users have the same client conf file.
I think it is the same for OpenVPN Access Server.

openvpn_inc

Hi Danran,

It is explained here, in the first paragraph;
https://openvpn.net/vpn-server-resources/create-connection-profiles-and-connect-client-installers/

Basically the server-locked profile is universal and isn't locked to a particular user account. It does this by referencing an API which the client must support. Therefore the server-locked profile isn't necessarily compatible with all OpenVPN clients. The user-locked profile is but it's locked to one particular user account.

Kind regards,
Johan

Danran

Thank you for this. I'm not sure how I didn't see this in the link, but I appreciate the understanding you gave me now!