If you want to update the firmware via the VPN, you need to enable Autostart During Boot. Enabling Autostart of the control application in Network > VPN > OpenVPN > [session name] is not adequate!
  1. Go to Network > VPN > OpenVPN.
  2. Check Enable Autostart During Boot.
  3. Select one of the configured sessions.
  4. Click Set Auto.
    The session will be marked in the Auto column.
    Click Set Auto again to dectivate autostarting the session.

    The system will prompt you for key pass phrases or the eToken/smartcard PIN if necessary.