Table Of Contents
Customizing the VPN Client Software
Customizing the VPN Client Using an MSI Transform
Creating the Transform
Installing the VPN Client Using the Transform
Installing the VPN Client Without User Interaction
Silent Installation Using MSI
Launching SetMTU with Silent Installation
Customizing the VPN Client GUI for Mac OS X
Customizing the VPN Client Software
This chapter explains how to replace the Cisco Systems brand with your own organization's brand. When you install and launch the VPN Client software, you see your own organization name, program name, and application names on menus, windows, dialogs, and icons.
For the Windows platform, it also explains how to set up the software so that your users can install it automatically without being prompted. This feature is called silent install.
To customize the VPN Client software, you create your own distribution image combining the following elements, which this chapter describes.
For all platforms, you can customize the following:
•
Cisco Systems image that you receive on the Cisco Systems software distribution CD.
•
Your own portable network graphics (PNG) (Table 10-1) and icon files to replace the Cisco Systems brand.
•
A vpnclient.ini file for configuring the VPN Client software globally (see Chapter 5, "Preconfiguring the VPN Client for Remote Users").
•
Individual profile (.pcf) files for each connection entry (see Chapter 5, "Preconfiguring the VPN Client for Remote Users").
Table 10-1 lists the GUI image (portable network graphic) files that the VPN Client uses. If you want to replace any of them with your own image files, you must name your image files exactly as shown in the list; otherwise, the VPN Client GUI does not recognize them.
Table 10-1 Portable Network Graphic Files
PNG File
|
Description
|
splash_screen.png
|
Splash screen that appears for 2 to 5 seconds when the GUI starts. This screen contains a logo, product name and version, and copyright information.
Rebranded splash-screen graphics must be at least 280 pixels wide to accommodate the box that displays the status text. There must be a full-width blank area at the bottom of the graphic at least 36 pixels in height.
|
title_bar.png
|
Image at the left end of the title bar
|
connected.png
|
Image next to connection entry when connection is active
|
logo.png
|
Organization logo for simple and advanced mode main dialogs
|
password_logo.png
|
Organization logo for password dialog (XAuth), group name and password)
|
profile_logo.png
|
Organization logo for new/modify profile dialog
|
status_down_arrow.png
|
Down arrow on the status bar of advanced mode, used to change the status bar display
|
cancel.png
|
Cancel button on advanced mode connection entries toolbar
|
connect_pressed.png
|
Connect button pressed on advanced mode connection entries toolbar
|
disconnect.png
|
Disconnect button on advanced mode connection entries toolbar
|
disconnect_pressed.png
|
Disconnect button pressed on advanced mode connection entries toolbar
|
new_profile.png
|
New button on advanced mode connection entries toolbar
|
new_profile_pressed.png
|
New button pressed on advanced mode connection entries toolbar
|
import_profile.png
|
Import button on advanced mode connection entries toolbar
|
import_profile_pressed.png
|
Import button pressed on advanced mode connection entries toolbar
|
modify_profile.png
|
Modify button on advanced mode connection entries toolbar
|
modify_profile_pressed.png
|
Modify button pressed on advanced mode connection entries toolbar
|
delete_profile.png
|
Delete button on advanced mode connection entries toolbar
|
delete_profile_pressed.png
|
Delete button pressed on advanced mode view certificates toolbar
|
import_certificate.png
|
Import button on advanced mode view certificates toolbar
|
import_certificate_pressed.png
|
Import button pressed on advanced mode view certificates toolbar
|
export_certificate.png
|
Export button on advanced mode view certificates toolbar
|
export_certificate_pressed.png
|
Export button pressed on advanced mode view certificates toolbar
|
delete_certificate.png
|
Delete button on advanced mode view certificates toolbar
|
delete_certificate_pressed.png
|
Delete button pressed on advanced mode view certificates toolbar
|
enroll_certificate.png
|
Enroll button on advanced mode view certificates toolbar
|
enroll_certificate_pressed.png
|
Enroll button pressed on advanced mode view certificates toolbar
|
verify_certificate.png
|
Verify button on advanced mode view certificates toolbar
|
verify_certificate_pressed.png
|
Verify button pressed on advanced mode view certificates toolbar
|
show_certificate.png
|
Show button on advanced mode view certificates toolbar
|
show_certificate_pressed.png
|
Show button pressed on advanced mode view certificates toolbar
|
enable_log.png
|
Enable button on advanced mode connection entries toolbar
|
enable_log_pressed.png
|
Enable button pressed on advanced mode view log toolbar
|
disable_log.png
|
Disable button on advanced mode view log toolbar
|
disable_log_pressed.png
|
Disable button pressed on advanced mode view log toolbar
|
clear_log.png
|
Clear button on advanced mode view log toolbar
|
clear_log_pressed.png
|
Clear button pressed on advanced mode view log toolbar
|
options_log.png
|
Options button on advanced mode view log toolbar
|
options_log_pressed.png
|
Options button pressed on advanced mode view log toolbar
|
show_log.png
|
Show button on advanced mode view log toolbar
|
show_log_pressed.png
|
Show button pressed on advanced mode view log toolbar
|
arrow_up.png
|
Up Arrow button in Backup Servers tab of the new/modify profile dialog
|
arrow_down.png
|
Down Arrow button in Backup Servers tab of the new/modify profile dialog
|
You can also replace the following icon files (as long as your icon files have these same names):
•
connected.ico—the tray icon when connected (also in resource file for vpngui.exe icon)
•
unconnected.ico—the tray icon when not connected
•
disconnecting.ico—the tray icon when disconnecting
Customizing the VPN Client Using an MSI Transform
This section describes how to customize VPN Client installation using a transform for the MSI. To customize the applications, you need both a transform and an oem.ini file.
Caution 
Do not modify the MSI file. To customize MSI, use a transform. Failure to follow recommended procedure will limit the level of support you can expect from Cisco.
Creating the Transform
To create the transform, you edit the vpnclient_setup.msi file. You can create the transform with any commercially available MSI installation package, such as Wise. The procedure in this section uses the Microsoft ORCA editor available from the Microsoft Windows Installer SDK. The version used here is from Microsoft Platform SDK November 2001. So before you begin, make sure that ORCA is installed on your system. If you need information on transforms and ORCA, refer to the ORCA documentation.
Note
For information on using Orca, see the Microsoft technical note "How to Create or Modify a Transform Using Microsoft Orca".
Note
This section does not include instructions on using ORCA. Do not attempt the following procedure unless you have experience using ORCA. If you are unfamiliar with ORCA, we recommend that you use an MSI installation package, such as Wise.
Here is the procedure:
Step 1
Start ORCA.
Step 2
Select File > Open and enter vpnclient_setup.msi.
Step 3
Select Transform > Apply Transform and select oem.mst, the transform template.
To customize oem.mst, you modify some of the information you see in the tables. The parts to modify have green change bars on the left side of the row.
Table 10-2 outlines the changes to make in the tables in the oem.mst file. The columns in the table are defined as follows:
•
Table Name—the name of the table to edit
•
Changes Needed—a list of the changes to make to the table
•
Install Requirement—the entries that modify the installation software
•
Client Requirement—the entries that modify the way the VPN Client operates at runtime
Table 10-2 Oem.mst Tables
Table Name
|
Changes Needed
|
|
Modifies Install Parameters
|
Modifies VPN Client Runtime Parameters
|
Binary
|
top16—Add your own 500x63 bitmap for the MSI Install
side16—Add you own 501x314 bitmap for the MSI Install
|
|
Yes for both
|
No for both
|
Component
|
CsCoFile_OemFiles—needed to install oem.ini file for custom VPN Clients
CsCoFile_oempngFiles—needed to install icons, bitmaps, and png files
|
|
No
|
Yes
|
Directory
|
INSTALLDIR—Change to your own directory
INSTALLDIR2—Change to your own directory
Cisco_Systems_VPN_Client— Change to your own folder name
|
|
Yes for all
|
No for all
|
Feature Components
|
Complete | CsCoFile_OemFiles—needed to install oem.ini file for custom VPN Clients
CsCoFile_oempngFiles—needed to install icons, bitmaps, and png files
|
|
No
|
Yes
|
File
|
Add the following files for customizing the VPN Client. For examples, see the oem.mst transform and the oem.ini files.
arrow_down.png arrow_up.png cancel.png cancel_pressed.png clear_log.png clear_log_pressed.png connect.png connected.ico connected.png connect_pressed.png delete_certificate.png delete_certificate_pressed.png delete_profile.png delete_profile_pressed.png disable_log.png disable_log_pressed.png disconnect.png disconnecting.ico disconnect_pressed.png enable_log.png enable_log_pressed.png enroll_certificate.png enroll_certificate_pressed.png
|
export_certificate.png export_certificate_pressed.png import_certificate.png import_certificate_pressed.png import_profile.png import_profile_pressed.png logo.png modify_profile.png modify_profile_pressed.png new_profile.png new_profile_pressed.png notifications.png notifications_pressed.png options_log.png options_log_pressed.png password_logo.png profile_logo.png show_certificate.png show_certificate_pressed.png show_log.png show_log_pressed.png splash_screen.png status_down_arrow.png title_bar.png unconnected.ico verify_certificate.png verify_certificate_pressed.png vpn_panel.png
|
No
|
Yes
|
Icon
|
Add the following icon files for customizing the VPN Client. These icons are for shortcuts on the Program Group. For examples, see the oem.mst transform and the oem.ini files.
MainIcon.ico setmtu.ico
|
|
No
|
Yes
|
Media
|
Add the following files for customizing the VPN Client. For examples, see the oem.mst transform and the oem.ini files.
arrow_down.png arrow_up.png cancel.png cancel_pressed.png clear_log.png clear_log_pressed.png connect.png connected.ico connected.png connect_pressed.png delete_certificate.png delete_certificate_pressed.png delete_profile.png delete_profile_pressed.png disable_log.png disable_log_pressed.png disconnect.png disconnecting.ico disconnect_pressed.png enable_log.png enable_log_pressed.png enroll_certificate.png enroll_certificate_pressed.png
|
export_certificate.png export_certificate_pressed.png import_certificate.png import_certificate_pressed.png import_profile.png import_profile_pressed.png logo.png modify_profile.png modify_profile_pressed.png new_profile.png new_profile_pressed.png notifications.png notifications_pressed.png options_log.png options_log_pressed.png password_logo.png profile_logo.png show_certificate.png show_certificate_pressed.png show_log.png show_log_pressed.png splash_screen.png status_down_arrow.png title_bar.png unconnected.ico verify_certificate.png verify_certificate_pressed.png vpn_panel.png
|
No
|
Yes
|
Property
|
ProductName—Supply company and product names for installation.
Manufacturer—Change publisher in the support information screen under Control Panel > Add/Remove Programs.
ARPURLINFOABOUT—Change the web page in the support information screen under Control Panel > Add/Remove Programs.
|
|
Yes
No
No
|
No
Yes
Yes
|
Shortcut
|
Dialer—Change the name and the icon for the VPN Dialer application.
SET_MTU—Change the name and the icon for the Set MTU application.
|
|
No for all
|
Yes for all
|
Installing the VPN Client Using the Transform
To install the VPN Client with the transform oem.mst that you have prepared, execute the following command at the command-line prompt.
msiexec /i vpnclient_setup.msi TRANSFORMS=oem.mst
If you want to record errors that might occur during the installation, you can create a log file as follows:
msiexec /i vpnclient_setup.msi /l*v! c:oeminstall.log TRANSFORMS=oem.msvpnclient_setup.msi
Installing the VPN Client Without User Interaction
This section describes how to produce installation without user interaction for MSI installations. Installing the VPN Client without user interaction is called silent mode. In silent mode, no messages or prompts appear on the screen.
Note
You can launch silent installation from the command line by using the -sd parameter with the vpnclient.exe command. For example, vpnclient -sd toVPN. For information on the vpnclient command, refer to "Configuring Automatic VPN Initiation—Windows Only".
Silent Installation Using MSI
To install the VPN Client without dialogs and messages (user interface) displaying on the screen, you can use either of the two following commands on the command line.
msiexec.exe /q [n|b|r|f] /i vpnclient_setup.msi
or
vpnclient_en.exe /q [n|b|r|f]
Option
|
What it Displays
|
q or qn
|
No user interface. It is advisable to enable logging to determine whether the installation succeeded, since this option eliminates all information including fatal error messages.
|
qb
|
The basic user interface, which is a limited progress dialog that Windows Installer generates. It is advisable to enable logging with this option as well.
|
qr
|
Reduced user interface, similar to the full user interface option, but includes only a subset of all dialogs. For example, this option displays the welcome, license agreement, destination folder, and start dialogs, but does not let the user change the destination folder.
|
qf
|
Full or complete user interface including all dialogs. This is the default setting.
|
Launching SetMTU with Silent Installation
The SetMTU utility is automatically launched in silent mode with the value of 1300 for all installed adapters. To disable the SetMTU utility during installation, set the LAUNCHSETMTU property on the command-line to 0. To modify the MTU value, set SETMTUVALUE to value. To override the DNE MtuAdjuistment parameter, which is set to 0, set DNEMTUADJUSTMENT to value.
For example, to disable SetMTU and set the DNE Mtuadjustment to 144, execute the following command:
vpnclient_setup.msi LAUNCHSETMTU=0 DNEMTUADJUSTMENT=144
For information on the SetMTU utility, see "Changing the MTU Size, page 11-5."
Customizing the VPN Client GUI for Mac OS X
To customize the VPN Client GUI for the Mac OS X platform, place the custom images in the Resources folder of the installer directory.
Figure 10-1shows the vpnclient installer directory. This directory contains the installer package and any preconfigured files in the Profiles and Resources folders.
The Resources folder contains all images for the VPN Client.
Figure 10-1 VPN Client Installer Directory
To distribute custom images, replace the image files in the Resources folder with your own custom images. For example:
•
To customize the logo, replace the file /etc/CiscoSystems/Resources/logo.png with your own custom logo.
•
To customize the splash screen, replace the file /etc/CiscoSystems/Resources/splash_screen.png with your own custom splash screen.
When the VPN Client is installed, the images in the Resources file are used for the client GUI.