OpenVPN Server Ubuntu 24.04 LTS AMI

AWS Marketplace AMI

OpenVPN Server Ubuntu 24.04 LTS AMI

Use a maintained OpenVPN Server AWS Marketplace AMI with baseline hardening controls, monthly rebuilds, reviewed SBOM/CVE evidence, and email support for listed AMI questions.

View on AWS Marketplace

At A Glance

What You Get / What You Still Own

Why Choose This AMI

• Faster launch path: Start from a reviewed AMI instead of manually installing OpenVPN, applying OS hardening, and assembling evidence from scratch.
• Maintenance process: Trusted Images rebuilds monthly and may rebuild sooner when warranted by upstream security updates.
• Evidence included: The reviewed AMI includes package inventory, source and root filesystem scan output, runtime hardening status, and CycloneDX SBOM data.
• No hidden customer defaults: The image does not install customer application secrets. You own credentials, certificates, users, routes, backups, and network policy.

Good Fit For

Teams that want a maintained OpenVPN Server base image for self-managed VPN gateway deployments, with clear launch responsibilities and evidence artifacts available for review.

What’s Included

• Hardened OpenVPN Server AMI on Ubuntu 24.04 LTS for VPN gateway deployments using your own PKI, routing, and client policy.
• Monthly security rebuilds with package inventory, SBOM, and root filesystem scan records for supported AMI versions.
• No default application credentials; package inventory and SBOM evidence included.
• Trusted Images release metadata and evidence artifact references.
• Email support for listed AMI questions.

Security And Hardening

• IMDSv2 is required by the AMI baseline.
• SSH root login and password authentication are disabled by the common hardening baseline.
• Runtime hardening, package inventory, SBOM generation, and root filesystem CVE scanning are part of the reviewed evidence path.
• No unsupported CIS, STIG, FIPS, HIPAA, SOC 2, PCI, or absence-of-vulnerabilities certification claim is made for this AMI.

Getting Started

1. Launch the AMI from AWS Marketplace in your AWS account using an appropriate x86_64 EC2 instance type.
2. Connect as ubuntu.
3. Review /etc/trusted-images/release and the service configuration before opening network access.
4. Create your own PKI, server configuration, client profiles, routes, DNS settings, logs, and security groups.
5. Open only the AWS security group ports your deployment needs. Default service reference: commonly UDP 1194 after configuration.
6. Enable EBS encryption, centralized logging, backups, and monitoring according to your environment requirements.

Evidence And Downloads

Download CycloneDX SBOM
Download Trivy root filesystem scan for the reviewed build

Pricing, EULA, And Support

Support covers the AMI as delivered, launch guidance, package questions, security patch notifications, and Marketplace image issues. Custom application development, managed operations, and third-party integrations are outside the standard support scope.

Buyer Responsibilities

You are responsible for customer data, users, credentials, certificates, network exposure, TLS, backups, monitoring, logging, scaling, compliance controls, and application-specific configuration after launch.

Open Source Notice

This AMI is maintained by Trusted Images and includes open source software packages for the target operating system. Trusted Images is not affiliated with, endorsed by, or sponsored by upstream maintainers unless explicitly stated.