OpenKey OpenVPN Setup Guide

Overview

OpenVPN is an open-source software used during OpenKey installations for 3rd party OEM sites.

This VPN helps establish our connection to the on-site lock server that has the key management system.

Firewall Rules:

The network firewall is normally a challenge during install of the OpenVPN software. To get ahead of this, If the property is working with a 3rd Party IT or have an on-site IT, it is best practice to provide the port number and IP addresses below to clear any potential roadblocks with the firewall not accepting our connection. The communication needs to be inbound and outbound.

IP Addresses:

147.75.0.29 & 147.75.0.120

UDP Port#:

1194

OpenVPN Download and Install:

Download OpenVPN 2.4.11 that matches your OS version. You can find multiple OpenVPN 2.4.11 builds via the link below:

https://build.openvpn.net/downloads/releases/

In most instances you will need one of these versions:

Windows 10, Server 2016, Server 2019:

https://build.openvpn.net/downloads/releases/openvpn-install-2.4.11-I602-Win10.exe

Windows 7, 8, Server 2012:

https://build.openvpn.net/downloads/releases/openvpn-install-2.4.11-I602-Win7.exe

Open the setup file and proceed with the prompts:

When the installer asks to select components, please make sure to uncheck OpenVPN GUI:

Once successfully installed, the window should look like the image below:

Config File Steps:

Download the site-specific Configuration file provided by OpenKey team via SendSafely to the lock server.

Drop the site-specific Configuration file to OpenVPN config folder. Specifically use the following path:

Local Disc (or C-Drive) -> Program Files -> OpenVPN -> Config

And

Go to the location C:\Program Files\OpenVPN and create a folder – config-auto. Copy or drag and drop the config file that was given to you into the newly created folder “config-auto.” The result should resemble an image below:

Service Rules:

In bottom-left hand corner search box type in “services”. Select “Services” (gear icon), make sure to run as administrator.

In Services navigate to “OpenVPN Interactive Service” and right click the service, select “properties” and a new window will pop up for the specific service. Make the following changes:

Under “General” Tab, “startup Type” must be set to Automatic. Ensure that the service status shows “Running”, note the image below:

Under "Log On" tab click the This account: option. Enter the administration user and password (or the service account that you created). Then, press Apply, note the image below:

Under “Recovery” tab all 3 dropdown boxes must be set to “Restart the Service”, note the image below:

At any point if Apply option is available make sure to choose it to ensure that the changes to service rules are applied.

After changing “OpenVPN Interactive Service” make the same changes to “OpenVPN Service”.

OpenVPN Legacy Service should be set to “Disabled”, note the image below:

IPCONFIG:

In bottom-left hand corner search box type in “CMD” or “Command Prompt” and select it, note the image below:

Once inside the “Command Prompt”, type in “ipconfig” this will allow you to check for the VPN’s IP Address and confirm successful connection, note the image below:

If the VPN has been configured properly, the VPN IP address will appear as "10.8.0.XXX" under the IPv4 Address on the TAP adaptor, this may not be the top adaptor so check all for the 10.8.x.xxx. The "XXX" should be a number. Please share the VPN IP address with OpenKey representative or notify them that “10.8.0.XXX” is not showing up.