Page 1 of 1

Difference between a server-locked profile and a user-locked profile?

Posted: Tue Aug 17, 2021 11:34 am
by Danran
In CWS, there are server-locked-profiles, and user-locked-profiles. I cannot find any documentation on these, and would appreciate it if anyone could please explain the difference between the two.

Thanks!

Re: Difference between a server-locked profile and a user-locked profile?

Posted: Thu Aug 26, 2021 9:41 am
by s0p4L1N
From what I have already experienced on OpenVPN on pfSense is:

- server-locked-profiles: one ovpn conf file for all users

- user-locked-profiles: one ovpn conf file for each user

On pfsense, we had OpenVPN with Radius + OTP authentication and then, all users have the same client conf file.
I think it is the same for OpenVPN Access Server.

Re: Difference between a server-locked profile and a user-locked profile?

Posted: Thu Aug 26, 2021 11:23 am
by openvpn_inc
Hi Danran,

It is explained here, in the first paragraph;
https://openvpn.net/vpn-server-resource ... nstallers/

Basically the server-locked profile is universal and isn't locked to a particular user account. It does this by referencing an API which the client must support. Therefore the server-locked profile isn't necessarily compatible with all OpenVPN clients. The user-locked profile is but it's locked to one particular user account.

Kind regards,
Johan

Re: Difference between a server-locked profile and a user-locked profile?

Posted: Thu Sep 16, 2021 2:31 pm
by Danran
Thank you for this. I'm not sure how I didn't see this in the link, but I appreciate the understanding you gave me now!