SSL-VPN Archives | Ricmedia PC Help

Connect VPN using SoftEther SSL-VPN on Windows (all versions)

[youtube=https://youtu.be/ywwqnffd1d4]

In this guide I will show you how to connect your Windows (all versions) PC/laptop to any VPN service that’s using the SoftEther SSL-VPN protocol. SoftEther SSL-VPN is a very safe and easy VPN protocol to set up and can easily traverse firewalls making it a good choice for those of you who live in oppressive regimens.

Before we start the connection setup process, you will need to find out the following details (best have them written or printed). If you are connecting to a paid VPN service, just login and your details and settings will be there. If you are connecting via a workplace, please contact your Network Administrator and ask them for the following details:

Required Info

Your VPN username
Your VPN password
Server host name or IP address (ie. contoso.com or 192.101.23.309)
Desirable to know the Authentication type (RADIUS or standard)

Once you have this info you can then watch the video above or follow the text guide below.

Connect via SoftEther SSL-VPN on Windows

Download the SoftEther Windows Client from http://www.softether-download.com/en.aspx?product=softether and choose (1) SoftEther VPN Client (2) Windows (3) Intel (x86 and x64)
Once downloaded, find and right-click on it, choose Run as Administrator then click Yes to the security alert to allow the program to run
Follow the installation instructions leaving everything at defaults
Click on the Start icon bottom-left of your screen and navigate to the SoftEther app and start it up
Double click on Add VPN Connection, click Yes to add a new Virtual Network Adapter, leave the name at VPN and click OK (be patient as it can take a while to complete)
Double click Add VPN Connection again, the New VPN Connection window will open
For Setting Name: give it a descriptive name (ie. HomeVPN or WorkVPN)
For Host Name: enter the server name or IP address (ie contoso.com or 182.167.23.101)
Now click on Hub Name: and the app should automatically detect and display the name, if it doesn’t just enter VPN for this option
Leave everything else at defaults (unless you have been given specific instructions to enter custom values)
In the right hand side section, choose either Standard Password Authetication or RADIUS Authentication, if you’re unsure, try Standard first, if it doesn’t work try RADIUS
Enter your VPN Username and Password into the respective fields
Finally click OK to save and close the window
You should now see your new connection, to connect, simply right-click on it and choose Connect, to disconnect, right-click on it and choose Disconnect
SoftEther VPN Client will recommend you if the connection was successful or not. If unsuccessful, double-check all settings again or contact your VPN service provider or Network Administrator
All done!

Connect VPN using SSTP on Windows (all versions)

[youtube=https://youtu.be/tgfeRj8m7VM]

In this guide I will show you how to connect your Windows (all versions) PC/laptop to any VPN service that’s using the SSTP protocol. Secure Socket Tunneling Protocol is very secure and stable but only works on Windows computers. It can avoid firewalls because it runs over port 443 (SSL) which is rarely blocked because it’s used by all web browsers for secure browsing.

Required Info

Your VPN username
Your VPN password
The server name or IP address (ie. contoso.com or 102.562.243.12)
Optional or required encryption
The password protocol (PAP, CHAP, MSCHAP or EAP)

Once you have this info you can then watch the video above or follow the text guide below.

Connect via SSTP to VPN on Windows (all versions)

Click on the Start icon bottom-left of your screen
Inside the search box, type Control Panel, then click on the first result
Click on Network and Internet, then click Network and Sharing Center
Now click on Set up a new connection or network link
In the window that opens, select Connect to a workplace, then click Next
Click on Use my Internet connection (VPN)
Enter the server name or IP address into the Internet address box
Enter a unique name you will recognize, ie Contoso (Work) or HomeVPN
Leave the Use smart card check box unchecked
(Windows 8.1 & 10) Leave Remember my credentials checked
Leave Allow other people to use this connection unchecked (unless you trust everyone using the computer)
(Windows VISTA, 7) Check the Don’t connect now checkbox
Now click on Create (the window will now close)
On the left pane, click on Change adapter settings
Look for your new connection, then right-click on it, and choose Properties
In the Properties window, select the Security tab
For Type of VPN select Secure Socket Tunneling Protocol (SSTP)
For Data encryption, select the encryption level your VPN service provider requires, if you’re unsure, select Require Encryption first, if you still cannot connect try Optional Encryption
For Authentication, select the method your VPN service provider requires, if you’re unsure, select Allow these protocols option, then check PAP, CHAP and MS-CHAP v2 checkboxes
Finally click OK to close the Properties window
For extra convenience, Right-click on your connection icon again and choose Create shortcut, choose Yes to the alert box. This will create a handy icon on your desktop.
Now simply right-click on the connection icon and choose Connect/Disconnect
Windows will tell you if the connection was successful
If you have any errors or the connection was unsuccessful, double-check all settings or contact your VPN service provider or network administrator.
All done!
NOTE* If you keep getting Error: 0x800B0109 see this guide

Install X.509 Certificate for SSTP VPN on Windows

[youtube=https://youtu.be/Lc26lBHWraU]

In this guide I will show you how to install an X.509 SSL encryption certificate (.crt) to connect to a VPN using the SSTP Protocol (aka MS-SSTP). SSTP is an excellent VPN protocol that easily traverses firewalls because it uses port 443 which is generally wide open to enable HTTPS secure web browsing. It’s also very fast for the same reason and offers good stability with minimal dropouts.

Before we begin there are a few requirements:

The X.509 security certificate file(s) available from your VPN provider or network admin
Administrator rights on your Windows PC (most accounts will have this)
*Note to Admins: the certificate name must match the hostname or the IP address of the server to work properly

Watch the video above or follow the text guide below.

Install X.509 Certificate for SSTP VPN

Locate the X.509 .crt certificate files, unzip if required
Click on the Start icon bottom-left of your screen
Type Run into the search box, then click the Run (Desktop app) result
Now type MMC into the Open: text box, click Yes to allow the app to run
The Microsoft Management Console window should now be open
Go to File > Add/Remove Snap-in… then select Certificates and click Add >
Select the Computer Account option, then click Next >
Select the Local computer: (the computer this console is running on) option, then click Finish, then click OK to close the window
On the left pane, expand folders to Certificates > Trusted Root Certification Authorities > Certificates
Right click on Certificates, then click All tasks > Import (see below)
In the Certificate Import Wizard, select the Local Machine option, then click Next
Now click the Browse button and navigate to the downloaded certificate file (.crt) and double-click to select, then click Next
Make sure that the Place all certificates in the following store: option is set to Trusted Root Certification Authorities (it’s usually the default) and click Next
Now click Finish, then OK to the success alert message, finally close X the console window, choose No to the Save settings alert box
You can now connect to the VPN server after setting up a new connection, see Connect VPN using SSTP on Windows (all versions) guide.

Fix Error: 0x800B0109

If you are trying to connect to a VPN using SSTP and keep getting Error 0x800B0109 on Windows XP/Vista/7 or "Error: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider" error on Windows 8.1/10, this is because you need to install X.509 SSL encryption certificate(s) for the server(s) you’re connecting to. These will be available from your VPN service providers website in the form of vpn.myvpn.crt Certificate files. Once you have them, continue this guide to install (video further below).

Note for Admins: If you are also getting this error whilst setting up your servers, you need to make sure that when generating your .CRT Certificate files, the Name: field must match exactly the hostname or IP address of your server. For instance, if your server hostname is us.sfc.myvpn.com then enter this for the Name: field on your certificate. You can also put the IP address of your server too.