Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

AWS Client VPN 5.3.1 on Windows 24H2 seems not working

1

I found some other comments about the AWS VPN Client not working properly on newer versions of Windows but none of them were recent so I thought I'd ask again. Reference: https://repost.aws/questions/QU6RogixKuSaqqEfYHOydSkQ/aws-vpn-client-does-not-work-since-version-5-x-5-2-2

Apparently, everything worked normally until version 23H2. After updating to 24H2, it stopped working.

We use SSO authentication, and the browser opens http://127.0.0.1:35001/ but reports ERR_CONNECTION_RESET.

Some logs found


2025-10-15 10:50:17.621 -03:00 [DBG][TI=22][VPN] CM processsing: >LOG:1760536217,I,SIGUSR1[soft,auth-failure] received, process restarting
2025-10-15 10:50:17.621 -03:00 [DBG][TI=22][VPN] CM processsing: >LOG:1760536217,,MANAGEMENT: >STATE:1760536217,RECONNECTING,auth-failure,,,,,
2025-10-15 10:50:17.621 -03:00 [DBG][TI=22][VPN] CM processsing: >STATE:1760536217,RECONNECTING,auth-failure,,,,,
2025-10-15 10:50:17.621 -03:00 [DBG][TI=22][VPN] Resetting CRM state due to a message from OpenVPN: >STATE:1760536217,RECONNECTING,auth-failure,,,,,.
2025-10-15 10:50:17.621 -03:00 [DBG][TI=22][VPN] [IPv4] Disabling route monitoring for profile: VPN
2025-10-15 10:50:17.621 -03:00 [DBG][TI=22][VPN] [IPv6] Disabling route monitoring for profile: VPN
2025-10-15 10:50:17.621 -03:00 [DBG][TI=22][VPN] CM received state: >STATE:1760536217,RECONNECTING,auth-failure,,,,,
2025-10-15 10:50:17.621 -03:00 [DBG][TI=22][VPN] Expected openvpn reconnecting message while waiting for saml assertion
2025-10-15 10:50:17.621 -03:00 [DBG][TI=22][VPN] CM processsing: >LOG:1760536217,,Restart pause, 5 second(s)
2025-10-15 10:50:17.621 -03:00 [INF][TI=22][VPN] Begin receive init again
2025-10-15 10:50:19.107 -03:00 [DBG][TI=27][VPN] SAML ACS context signal:True
2025-10-15 10:50:19.107 -03:00 [DBG][TI=27][VPN] SAML ACS wait for next context.
2025-10-15 10:50:19.108 -03:00 [DBG][TI=19][] SAML ACS processing context.
2025-10-15 10:50:19.108 -03:00 [ERR][TI=19][] SAML ACS was not able to process the request
System.Net.HttpListenerException (0x80004005): Não há suporte para o pedido
   em System.Net.HttpListener.EndGetContext(IAsyncResult asyncResult)
   em ACVC.Core.Saml.SamlAcs.ProcessContext(IAsyncResult result)
2025-10-15 10:50:19.113 -03:00 [DBG][TI=19][] Received event from acs
2025-10-15 10:50:19.113 -03:00 [DBG][TI=19][VPN] Acs failure has occured
2025-10-15 10:50:19.113 -03:00 [ERR][TI=19][VPN] Exception occurred when processing OVPN messages in SamlAuthenticator
System.Net.HttpListenerException (0x80004005): Não há suporte para o pedido
   em ACVC.Core.Saml.SamlManager.<Login>d__12.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()
   em ACVC.Core.Auth.SamlAuthenticator.<WaitForSamlUserLoginAsync>d__7.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter.GetResult()
   em ACVC.Core.Auth.SamlAuthenticator.<ProcessOvpnMessage>d__11.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter.GetResult()
   em ACVC.Core.Auth.SamlAuthenticator.<OvpnMessageHandler>d__10.MoveNext()
2025-10-15 10:50:19.115 -03:00 [DBG][TI=19][VPN] Attempting cancel SAML flow if in progress
2025-10-15 10:50:19.115 -03:00 [DBG][TI=19][VPN] Stoping timer
2025-10-15 10:50:19.115 -03:00 [DBG][TI=19][VPN] Stopping SAML ACS server
2025-10-15 10:50:19.115 -03:00 [DBG][TI=22][] SAML ACS processing context.
2025-10-15 10:50:19.115 -03:00 [DBG][TI=27][VPN] SAML ACS context signal:True
2025-10-15 10:50:19.115 -03:00 [DBG][TI=27][VPN] SAML ACS listen loop end.
2025-10-15 10:50:19.115 -03:00 [DBG][TI=19][VPN] SAML ACS server stopped
2025-10-15 10:50:19.115 -03:00 [DBG][TI=22][] SAML ACS was stopped.
2025-10-15 10:50:19.116 -03:00 [ERR][TI=19][VPN] Error when processing OVPN messages
System.Net.HttpListenerException (0x80004005): Não há suporte para o pedido
   em ACVC.Core.Saml.SamlManager.<Login>d__12.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()
   em ACVC.Core.Auth.SamlAuthenticator.<WaitForSamlUserLoginAsync>d__7.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter.GetResult()
   em ACVC.Core.Auth.SamlAuthenticator.<ProcessOvpnMessage>d__11.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter.GetResult()
   em ACVC.Core.Auth.SamlAuthenticator.<OvpnMessageHandler>d__10.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter.GetResult()
   em ACVC.Core.Auth.SamlAuthenticator.<Authenticate>d__5.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter.GetResult()
   em ACVC.Core.Auth.AuthenticationManager.<Authenticate>d__4.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter.GetResult()
   em ACVC.Core.OpenVpn.OvpnConnectionManager.<>c__DisplayClass86_0.<<ProcessMessageImpl>b__0>d.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter.GetResult()
   em ACVC.Core.OpenVpn.OvpnMessageProcessor.<>c__DisplayClass9_0.<<AsyncTask>b__0>d.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()
   em ACVC.Core.OpenVpn.OvpnMessageProcessor.<SafeProcessMessage>d__11.MoveNext()
2025-10-15 10:50:19.117 -03:00 [DBG][TI=19][VPN] CRM: handling connection state event: Disconnecting
2025-10-15 10:50:19.117 -03:00 [DBG][TI=19][VPN] [IPv4] Disabling route monitoring for profile: VPN
2025-10-15 10:50:19.117 -03:00 [DBG][TI=19][VPN] [IPv6] Disabling route monitoring for profile: VPN
2025-10-15 10:50:19.117 -03:00 [DBG][TI=19][VPN] Connection state changed for CVPN endpoint id: cvpn-endpoint-0c5202569c892c04f
2025-10-15 10:50:19.117 -03:00 [INF][TI=19][VPN] Terminating connection
2025-10-15 10:50:19.118 -03:00 [WRN][TI=19][VPN] Acs did not stop correctly!
2025-10-15 10:50:19.118 -03:00 [DBG][TI=19][VPN] 🏞 Ending connection details reporting.
2025-10-15 10:50:19.120 -03:00 [DBG][TI=19][VPN] Stopping openvpn process
2025-10-15 10:50:19.225 -03:00 [INF][TI=22][VPN] Received bytes: 52
2025-10-15 10:50:19.225 -03:00 [DBG][TI=22][VPN] Message marshalling complete
2025-10-15 10:50:19.225 -03:00 [DBG][TI=19][VPN] Cancelling socket listen token
2025-10-15 10:50:19.225 -03:00 [DBG][TI=19][VPN] Dispose socket
2025-10-15 10:50:19.225 -03:00 [DBG][TI=22][VPN] CM received: >LOG:1760536219,D,MANAGEMENT: CMD 'signal SIGTERM'

2025-10-15 10:50:19.225 -03:00 [DBG][TI=22][VPN] CM processsing: >LOG:1760536219,D,MANAGEMENT: CMD 'signal SIGTERM'
2025-10-15 10:50:19.226 -03:00 [DBG][TI=22][VPN] Skipping OVPN message due to connection state: Disconnecting. Skipped message: >LOG:1760536219,D,MANAGEMENT: CMD 'signal SIGTERM'
2025-10-15 10:50:19.453 -03:00 [DBG][TI=20][VPN] Release process manager lock
2025-10-15 10:50:19.453 -03:00 [DBG][TI=20][VPN] Received remove connection manager request. Profile: VPN
2025-10-15 10:50:19.453 -03:00 [INF][TI=20][VPN] Disconnected
2025-10-15 10:50:19.457 -03:00 [DBG][TI=20][VPN] Inserted metric CONNECTION_INITIALIZATION_TIME 5 to MetricsTable
2025-10-15 10:50:19.459 -03:00 [DBG][TI=20][VPN] Inserted analytic CONNECTION_INITIALIZATION_TIME 5 to AnalyticsTable
2025-10-15 10:50:19.459 -03:00 [DBG][TI=20][VPN] Snapshotting routing table for event: Disconnected
2025-10-15 10:50:19.459 -03:00 [DBG][TI=20][VPN] CRM: handling connection state event: Disconnected
2025-10-15 10:50:19.459 -03:00 [DBG][TI=20][VPN] [IPv4] Disabling route monitoring for profile: VPN
2025-10-15 10:50:19.459 -03:00 [DBG][TI=20][VPN] [IPv6] Disabling route monitoring for profile: VPN
2025-10-15 10:50:19.459 -03:00 [DBG][TI=20][VPN] Invalidating routes backup
2025-10-15 10:50:19.459 -03:00 [DBG][TI=20][VPN] Connection state changed for CVPN endpoint id: cvpn-endpoint-0c5202569c892c04f
2025-10-15 10:50:19.459 -03:00 [DBG][TI=20][VPN] Received exception for connection state Disconnected. Show error message to user
2025-10-15 10:50:19.459 -03:00 [ERR][TI=20][VPN] Exception recieved by connect window view model
System.Net.HttpListenerException (0x80004005): Não há suporte para o pedido
   em ACVC.Core.Saml.SamlManager.<Login>d__12.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()
   em ACVC.Core.Auth.SamlAuthenticator.<WaitForSamlUserLoginAsync>d__7.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter.GetResult()
   em ACVC.Core.Auth.SamlAuthenticator.<ProcessOvpnMessage>d__11.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter.GetResult()
   em ACVC.Core.Auth.SamlAuthenticator.<OvpnMessageHandler>d__10.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter.GetResult()
   em ACVC.Core.Auth.SamlAuthenticator.<Authenticate>d__5.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter.GetResult()
   em ACVC.Core.Auth.AuthenticationManager.<Authenticate>d__4.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter.GetResult()
   em ACVC.Core.OpenVpn.OvpnConnectionManager.<>c__DisplayClass86_0.<<ProcessMessageImpl>b__0>d.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter.GetResult()
   em ACVC.Core.OpenVpn.OvpnMessageProcessor.<>c__DisplayClass9_0.<<AsyncTask>b__0>d.MoveNext()
--- Fim do rastreamento de pilha do local anterior onde a exceção foi gerada ---
   em System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   em System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   em System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()
   em ACVC.Core.OpenVpn.OvpnMessageProcessor.<SafeProcessMessage>d__11.MoveNext()
2025-10-15 10:50:19.461 -03:00 [DBG][TI=20][VPN] Inserted metric UI_APP_VPN_CONNECT_GENERAL_ERROR 1 to MetricsTable
2025-10-15 10:50:19.463 -03:00 [DBG][TI=20][VPN] Inserted analytic UI_APP_VPN_CONNECT_GENERAL_ERROR 1 to AnalyticsTable
2025-10-15 10:50:19.465 -03:00 [DBG][TI=20][VPN] Inserted metric UI_APP_VPN_CONNECT_ATTEMPT_FAIL_UNCATEGORIZED_ERROR 1 to MetricsTable
2025-10-15 10:50:19.467 -03:00 [DBG][TI=20][VPN] Inserted analytic UI_APP_VPN_CONNECT_ATTEMPT_FAIL_UNCATEGORIZED_ERROR 1 to AnalyticsTable
2025-10-15 10:50:19.547 -03:00 [DBG][TI=27][VPN] C:\Windows\System32\route.exe exit code: 0
2025-10-15 10:50:19.547 -03:00 [DBG][TI=27][VPN] Routing Table Snapshot:
===========================================================================
Topics
ComputeNetworking & Content Delivery
Tags
AWS Client VPNWindows
Language
English

asked a year ago534 views

2 Answers
0

I had this error and found that I had an existing urlacl configured.

netsh http show urlacl

I confirmed that it was safe to remove the reservation before I deleted it. (It was created using my old account on the same box.)

netsh http delete urlacl url=http://127.0.0.1:35001/

Once it was deleted, everything worked as expected.

answered 4 months ago

-4

You're experiencing a known issue with AWS Client VPN version 5.x on Windows 24H2. This compatibility problem has been reported by multiple users, and the error you're seeing with SSO authentication (where the browser opens to http://127.0.0.1:35001/ but reports ERR_CONNECTION_RESET) is consistent with these reports.

The error in your logs "System.Net.HttpListenerException (0x80004005): Não há suporte para o pedido" (which translates to "Request not supported") indicates that the SAML authentication process is failing. This is likely due to compatibility issues between the AWS VPN Client version 5.3.1 and Windows 24H2.

This appears to be a continuation of issues that began with Windows 23H2 and have persisted into 24H2. While AWS has released newer versions of the client (including 5.3.1 for Windows x64 and Arm64 in September 2025), these versions still seem to have compatibility issues with the latest Windows updates.

As a workaround, many users have found success by downgrading to AWS VPN Client version 4.x (specifically 4.1.0), which appears to be more compatible with recent Windows builds. This is currently the most reliable solution until AWS releases a version that fully addresses the compatibility issues with Windows 24H2.

If downgrading is not an option, you could try:

  1. Running the AWS VPN Client as administrator
  2. Checking that the AWS VPN Client service is running and set to Automatic startup
  3. Temporarily disabling any third-party antivirus or security software
  4. Verifying there are no conflicting VPN software applications installed
    Sources
    AWS VPN Client does not work since Version 5.x (5.2.2) | AWS re:Post
    AWS VPN Error - OpenVPN Process Failed to Start | AWS re:Post
    Document history - AWS Client VPN

answered a year ago

  • Eduardo Bohrer
    a year ago

    Just for information.

    We've tried all the options suggested above (running as administrator, disabling antivirus and Defender, other conflicts, and even downgrading to version 4.x) and have had no results.

  • TomiH
    a year ago

    We have the same issue and none of the suggested options have any effect.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content