# AWS Client VPN client login banners
<a name="cvpn-working-login-banner"></a>

AWS Client VPN provides the option to display a text banner on AWS provided Client VPN desktop applications when a VPN session is established. You can define the contents of the text banner to meet your regulatory and compliance needs. A maximum of 1400 UTF-8 encoded characters can be used.

**Note**  
When a client login banner has been enabled, it will be displayed on newly created VPN sessions only. Existing VPN sessions are not interrupted, though the banner will be displayed when an existing session is re-established.

## Banner creation
<a name="configure-login-banner-endpoint-creation"></a>

Login banners are initially created and enabled during the creation of the Client VPN endpoint. For the steps to enable a client login banner during creation of a Client VPN endpoint, see [Create an AWS Client VPN endpoint](cvpn-working-endpoint-create.md).

**Topics**
+ [Banner creation](#configure-login-banner-endpoint-creation)
+ [Configure a client login banner for an existing endpoint](configure-login-banner-existing-endpoint.md)
+ [Deactivate a client login banner for an endpoint](disable-login-banner.md)
+ [Modify existing banner text](modify-banner-text.md)
+ [View a currently configured login banner](display-login-banner.md)

# Configure a client login banner for an existing AWS Client VPN endpoint
<a name="configure-login-banner-existing-endpoint"></a>

Use the following steps to configure a client login banner for an existing Client VPN endpoint.

**Enable client login banner on a Client VPN endpoint (console)**

1. Open the Amazon VPC console at [https://console.aws.amazon.com/vpc/](https://console.aws.amazon.com/vpc/).

1. In the navigation pane, choose **Client VPN Endpoints**.

1. Select the Client VPN endpoint that you want to modify, choose **Actions**, and then choose **Modify Client VPN Endpoint**.

1. Scroll down the page to the **Other parameters** section.

1. Turn on **Enable client login banner**.

1. For **Client login banner text**, enter the text that will be displayed in a banner on AWS provided clients when a VPN session is established. Use UTF-8 encoded characters only, with a maximum of 1400 characters allowed.

1. Choose **Modify Client VPN endpoint**.

**Enable client login banner on a Client VPN endpoint (AWS CLI)**  
Use the [modify-client-vpn-endpoint](https://docs.aws.amazon.com/cli/latest/reference/ec2/modify-client-vpn-endpoint.html) command.

# Deactivate a client login banner for an existing AWS Client VPN endpoint
<a name="disable-login-banner"></a>

Use the following steps to deactivate a client login banner for an existing Client VPN endpoint.

**Deactivate client login banner on a Client VPN endpoint (console)**

1. Open the Amazon VPC console at [https://console.aws.amazon.com/vpc/](https://console.aws.amazon.com/vpc/).

1. In the navigation pane, choose **Client VPN Endpoints**.

1. Select the Client VPN endpoint that you want to modify, choose **Actions**, and then choose **Modify Client VPN endpoint**.

1. Scroll down the page to the **Other parameters** section.

1. Turn off **Enable client login banner?**.

1. Choose **Modify Client VPN endpoint**.

**Deactivate client login banner on a Client VPN endpoint (AWS CLI)**  
Use the [modify-client-vpn-endpoint](https://docs.aws.amazon.com/cli/latest/reference/ec2/modify-client-vpn-endpoint.html) command.

# Modify existing banner text on a AWS Client VPN endpoint
<a name="modify-banner-text"></a>

Use the following steps to modify existing text on a Client VPN client login banner.

**Modify existing banner text on a Client VPN endpoint (console)**

1. Open the Amazon VPC console at [https://console.aws.amazon.com/vpc/](https://console.aws.amazon.com/vpc/).

1. In the navigation pane, choose **Client VPN Endpoints**.

1. Select the Client VPN endpoint that you want to modify, choose **Actions**, and then choose **Modify Client VPN endpoint**.

1. For **Enable client login banner?**, verify that it's turned on.

1. For **Client login banner text**, replace the existing text with new text that you want displayed in a banner on AWS provided clients when a VPN session is established. Use UTF-8 encoded characters only, with a maximum of 1400 characters.

1. Choose **Modify Client VPN endpoint**.

**Modify client login banner on a Client VPN endpoint (AWS CLI)**  
Use the [modify-client-vpn-endpoint](https://docs.aws.amazon.com/cli/latest/reference/ec2/modify-client-vpn-endpoint.html) command.

# View a currently configured AWS Client VPN login banner
<a name="display-login-banner"></a>

Use the following steps to view a currently configured Client VPN client login banner.

**View current login banner for a Client VPN endpoint (console)**

1. Open the Amazon VPC console at [https://console.aws.amazon.com/vpc/](https://console.aws.amazon.com/vpc/).

1. In the navigation pane, choose **Client VPN Endpoints**.

1. Select the Client VPN endpoint that you want to view.

1. Verify that the **Details** tab is selected.

1. View the currently configured login banner text next to **Client login banner text**. 

**View currently configured login banner for a Client VPN endpoint (AWS CLI)**  
Use the [describe-client-vpn-endpoints](https://docs.aws.amazon.com/cli/latest/reference/ec2/describe-client-vpn-endpoints.html) command.