OpenVPN Connect
Android and Apple. Delivery of the official client, the profile and related connection parameters.
All parameters
| Parameter | Purpose and values | Verification and dependencies |
|---|---|---|
| Profile source | Import of .ovpn or manual Managed configuration. | Use a profile issued by your VPN server. |
| Infrastructure | Access Server, CloudConnexa or Open Source. | Select the actual server; the authentication scheme must match it. |
| Profile distribution | Shared — common; PerUser — personal for the user; PerDevice — personal for the device. | Check the client identity and make sure one personal certificate is not issued to the entire fleet. |
| Authentication | UsernamePasswordMfa, CertificateOnly or CertificateAndMfa. | Password/MFA requires the recipient’s participation; a certificate requires prepared trust and a private key. |
| Certificate alias | Name by which the client refers to the installed identity. | Check that the corresponding certificate is present on the target device. |
| Always-on | Request for a persistent VPN connection. | Applicability depends on the OS, management mode and client; check after a restart and after network loss. |
| Per-app | VPN request for selected apps. | Check the actual routing of the required app, not just the presence of the checkbox. |
| Additional parameters | Rare client keys as key/value pairs. | The form explicitly requires prior confirmation of these keys on a test device. |
Limitations and dependencies
Importing a profile does not prove the connection works. Check separately the client installation, .ovpn import, authentication, the tunnel and access to the resource. MFA options should not be described as a fully automatic connection without user involvement.
Creation and assignment
Create a configuration, fill in the parameters and run the preliminary check. After saving, assign recipients. Start with one test device.
Verifying application
In the device card, check the assignment and the latest contact. In client events, find the processing result, then check the feature itself on the device. If the feature has not changed, check the management channel, platform, delivery and compatibility.