Replace pre-shared keys for VPNs (2024)

As a security precaution, we recommend that you periodically change the pre-shared key.

Steps

1. Select Configuration, then browse to SD-WAN.
2. For policy-based VPNs, right-click the Policy-Based VPN element, select Edit <element type>, then follow these steps.
   1. Click the Tunnels tab.
   2. To automatically generate pre-shared keys for multiple tunnels, select the tunnels.
   3. Right-click the selected tunnels, then select Delete Pre-Shared Key.
   4. Right-click the selected tunnels again, then select Generate Missing Pre-Shared Key.

      A new pre-shared key is generated for each tunnel.

   5. To manually enter the key for a single tunnel, double-click the Key column, then enter or paste the key.
   6. To transfer the key for a tunnel to external components, double-click the Key column, then copy the key, or click Export.

      Note: Make sure that outsiders cannot obtain the key while you transfer it to other devices. The key must remain secret to be an effective security measure.

3. For route-based VPNs, right-click a Route-Based VPN Tunnel element, select Properties, then follow these steps.
   1. Next to Pre-Shared Key, select Edit.
      • To automatically generate a key, click Generate.
      • To manually enter the key, enter or paste the key.
      • To transfer the key to external components, copy the key, or click Export.
   2. Click OK.
4. Click Save.