The necessary parts are ...

        openvpn-2-gui-install.exe
                - installs OpenVPN with a GUI.
                - ignore the following message if it appears during
                  the OpenVPN installation:

                        TAP-Win32 Adapter V8 has not passed Windows Logo
                        testing to verify its compatibility with Windows XP.

        putty-installer.exe
                - installs PuTTY (if you don't already have it)

        get_can.bat
                - only need to use this once.
                - downloads an OpenVPN configuration.
                - you'll be prompted for your SecurID passcode.

        chk_can.bat
                - can be used at any time to verify that SecurID
                  authentication is still functioning properly.

After running get_can.bat you should be able to use OpenVPN as many
times as you need.

Enter your current SecurID passcode when OpenVPN prompts for a password.

When an OpenVPN tunnel is running, use the following hostnames to connect
to the related CAN systems:

                        dwh1.ovpn.cns.utoronto.ca
                        dwh2.ovpn.cns.utoronto.ca
                        etl3.ovpn.cns.utoronto.ca
                        etl4.ovpn.cns.utoronto.ca
                        utbi.ovpn.cns.utoronto.ca
                        utbitest.ovpn.cns.utoronto.ca
                        ams-sig.ovpn.cns.utoronto.ca
                        ams-its.ovpn.cns.utoronto.ca
                        agate.ovpn.cns.utoronto.ca
                        hrweb.ovpn.cns.utoronto.ca
                        bela.ovpn.cns.utoronto.ca
                        plaut.ovpn.cns.utoronto.ca
                        ams-ebp.ovpn.cns.utoronto.ca
                        ams-bc.ovpn.cns.utoronto.ca
                        viktor.ovpn.cns.utoronto.ca
                        qits.ovpn.cns.utoronto.ca
                        agate1.ovpn.cns.utoronto.ca
                        agate2.ovpn.cns.utoronto.ca