Deploying the VPN Client

Introduction

The deployment of the software mostly relies on the fact that it can be installed silently, i.e. without any user interaction (prompts or warnings).

All the software configuration options can therefore be set during installation, either using initialization files or the set of MSI parameters and properties passed from the command line.

Customizing the software

In addition to using the software’s Configuration Panel to generate VPN configurations to be deployed, you can customize the SN VPN Client Exclusive during installation and when you use it for the first time by any of the following three means:

  • Using a set of parameters and properties passed to the MSI installer from the command line

  • Using a software installation configuration file (vpnsetup.ini)

  • • Using a PKCS#11 tokens or smart card initialization file (vpnconf.ini).

The configuration files must be stored in the following directories:

  • vpnsetup.ini must be stored in the C:\Windows directory

  • vpnconf.ini must be stored in the same directory where the SN VPN Client Exclusive is installed and running (C:\Program Files\Stormshield\Network VPN Client Exclusive\ by default).

These various means of configuring the software during its installation allow you, for example, to prepare the deployment of the VPN Client on heterogeneous platforms equipped with different tokens or smart cards, but for which the certificates to be used have the same characteristics (e.g. the certificates to be used are of “authentication” type).

Other example: The VPN Client can be deployed on platforms equipped with tokens or smart cards that are unknown to it. The configuration file allows the VPN Client to recognize them.

Silent installation

A “silent” installation is an installation that is carried out without any user interaction, prompts, or warnings. The installation is carried out in an entirely transparent manner.

In this case, the installation parameters are configured using a set of MSI parameters and properties passed from the command line or the vpnsetup.ini software installation configuration file (see chapter vpnsetup.ini file).

To run the installation in silent mode, use the /quiet option in the command line.

  1. Download the NetworkVpnClientExclusive_Setup.msi installation program from MyStormshield.

  2. Run the Windows command prompt as an administrator and enter the following command line:

msiexec /i "[download_directory]\NetworkVpnClientExclusive_Setup.msi" /q

EXAMPLE
msiexec /i "[download_directory]\NetworkVpnClientExclusive_Setup.msi" /q LICENSE=[license_number]

[download_directory] is the directory to which the installer was downloaded.

NOTE
For more command-line installation options, refer to chapter Parameters and properties of the MSI installer.

Deploying an update

Deploying a SN VPN Client Exclusive update is done in the exact same way as deploying a new installation.

When performing a silent update, the entire update process is silent (back up parameters, uninstall previous version, install new version, restore parameters).

NOTE
However, no version whatsoever of the Standard edition can be updated. This edition requires the prior version to be uninstalled. Moreover, the VPN configurations are not compatible.

Repairing

The repair function of the MSI installer is currently not supported.

Uninstalling the software

The software can be uninstalled from the Programs and Features tab in the Windows Control Panel or by right clicking the SN VPN Client Exclusive icon in the Windows Start menu and choosing Uninstall.

Order in which properties and files are taken into account

During installation, the properties passed in the command line have priority over equivalent values possibly present in the vpnsetup.ini file.

The vpnconf.ini file is taken into account each time the SN VPN Client Exclusive is started.