equinux VPN Tracker 8.1.1 - Manual (Page 35)

Locking Exported Connections
VPN Tracker offers several ways of locking down and protecting your connec-
tion information when you export or deploy connections. To change the secu-
rity settings for an exported connection:
‣ Select a connection
‣ Click the Configure… button
‣ Click „Export Settings…“ at the bottom of the window
Now you can password-protect the connection and adjust which information
is visible to the user. All security settings are explained in more detail in
→ Export Settings Explained.
Export Settings Explained
Pre-Shared Key
Include pre-shared key from keychain
If you have saved the pre-shared key in your keychain, VPN Tracker can in-
clude this pre-shared key with the exported connection.
Permit pre-shared keys to be stored in and loaded from the keychain
Checking this option will (a) move an included pre-shared key into the user’s
keychain when importing the connection, and (b) permit users to store their
pre-shared key in keychain if none is included with the exported connection.
The OS X keychain is a very secure way of storing passwords.
However, users will be able to see the pre-shared key via the Key-
chain Access application.
If you include a pre-shared key but don’t permit storing the pre-
shared key in keychain, the pre-shared key will be left in the con-
nection.
This is less secure in terms of encryption, but will pre-
vent a user from seeing the pre-shared key.
Extended Authentication (XAUTH)
Include XAUTH login and password
If you are using Extended Authentication (XAUTH), you can also include a
user’s XAUTH credentials (username and password) in the exported connec-
tion. Select whether you would like to include the username and password
stored in your keychain, or be asked for an XAUTH username and password
when exporting the connection.
35