OpenVPN Installation Guide

For remote access to internal services hosted at the Institute for Advanced Study (IAS), we utilize the OpenVPN software. This software allows authenticated users to create an encrypted tunnel or Virtual Private Network (VPN) between their remote device and our campus. This has a dual purpose of protecting your traffic from malicious networks and gaining you secure access to campus resources. This access includes services like home directories, the Princeton University Library Gateway (PULIBGW), and more. This VPN is replacing our legacy Pulse Secure VPN, which will eventually be decommissioned.

Remote access requires the use of Multi-Factor Authentication. If you haven't set this up for your IAS account, please see our information page or contact the Computing Helpdesk for DuoSecurity before continuing.

The installation and use of OpenVPN will require your IAS Credentials. Make sure you fill in these fields correctly and do not include the domain of @ias.edu in your username.

This page links to installation guides for various devices and operating systems. Should you run into any trouble, please contact the Computing Helpdesk for more information.

Legacy Web Gateway Guide - contact your computing helpdesk for more information.

Installation Guide

​​​​​​.pdf OpenVPN instructions for macos

   1. Open your preferred web-browser and search for openvpn.ias.edu

   2. Enter your IAS Credentials and click Sign In

openvpn login

 

   3. Open your Duo app and select Show Password

   4. Enter the single-use Duo password and click Continue

duo push openvpn

 

   5. Select MacOS as your platform to download the OpenVPN launcher, select Allow

   6. Open the downloaded file by navigating to your downloads folder and selecting the downloaded file

installer download

 

   7. Follow the instructions on your screen and Continue through the installation process

install openvpn connect

 

   8. You may need to sign in as an administrator to allow the installation. If so, enter your Username and Password and hit Install Software

install software

 

   9. Navigate to your Applications folder and double-click the OpenVPN Connect application
          *Do not select the OpenVPN Connect folder

opening the application

 

   10. Click through the pop-ups and instructions on your screen

   11. Enter openvpn.ias.edu as the URL and select Next

accessing the vpn

 

   12. Enter your IAS credentials under Username and Password, select Import

enter username and password

 

   13. Click on the OpenVPN Profile bar to connect to the VPN

   14. Enter your IAS Password and select OK

enter password

 

   15. Enter your Duo passkey following the same process as in steps 3 and 4

   16. Congrats! You are now connected to the IAS OpenVPN

youre connected!!!

 

 

.pdf OpenVPN instructions for Windows

   1. Open your preferred web-browser and search for openvpn.ias.edu

   2. Enter your IAS Credentials and click Sign In

Windows OpenVPN login page

   3. Open your DUO App and select Show Password

   4. Enter the single-use DUO Password and click Continue

DUO passcode in OpenVPN

   5. Select Windows as your platform to download the OpenVPN launcher

   6. Open the downloaded file by clicking on it

download page

 

   7. Wait for the Setup Wizard to open

   8. Click Next, accept the Terms and Conditions, then select Install

Setup wizard

 

   9. Click through the pop-ups and instructions on your screen

   10. Click on the OpenVPN Profile bar to connect to the VPN

Connecting to the VPN

 

   11. Enter your IAS credentials

   12. Enter your Duo passkey following the same process as in steps 3 and 4

Enter IAS Credentials

 

   13. Congrats! You are now connected to the IAS OpenVPN

You're in!!!

 

    Command Line Configurations

    1. Open a terminal.
    2. Install the OpenVPN client. For RedHat-based systems (CentOS, Springdale Linux, Fedora), type sudo yum install openvpn.
    3. You will be asked to verify the download: type Y, and press Enter/Return.
    4. You will see a verification of the package you installed along with a message telling you the download is complete.
    5. In your browser, navigate to openvpn.ias.edu.
    6. Enter your IAS credentials and then press Go.
    7. Click on Yourself (user-locked profile) to download your OpenVPN profile. Make sure this download goes into your Download folder. This will be the default download location unless you have changed it.
    8. In your terminal type the following command (all Linux variants):
      sudo openvpn --config Downloads/client.ovpn --auth-retry interact
    9. You will be prompted to enter your IAS credentials, enter your credentials then press Enter to proceed. 
    10. Press CTRL-C to exit.
    11. You should also see your new IP address if you run ip addr or ifconfig in another terminal window.

    Network Manager Configuration:

    1. Open a terminal and install the Network Manager plugins for OpenVPN and Gnome. For RedHat based system, type sudo yum install openvpn NetworkManager-openvpn NetworkManager-openvpn-gnome.
    2. You will be asked to allow the download,  type Y then press Enter/Return.
    3. When the installation is complete, you will see the packages you installed along with a verification that the download was completed.
    4. In your browser, navigate to openvpn.ias.edu.
    5. Enter your IAS credentials and press Go.
    6. Click Yourself (user-locked profile).
    7. At the top right of your desktop, click on the internet options symbol and then click Edit Connections....
    8. In the bottom-left of the pop-up window, click the + symbol to add a connection.
    9. In the Choose a Connection Type window, open the drop-down menu and select Import a saved VPN configuration... then press Create....
    10. In your file manager, navigate to your default download location (usually Downloads), and select the client.ovpn file.
    11. At the top of the new window, change the connection name to openvpn.ias.edu.
    12. Enter your IAS username in the Username box.
    13. Click on the question mark in the password box, check Ask for this password every time then click Save.
    14. In the Internet settings, under VPN Connections click on openvpn.ias.edu. It will ask you for your user credentials.
    .PDF openvpn instructions for ios

      1. Open the App Store and search for OpenVPN Connect

      2. Click “Get” and follow the instructions on your screen

          This will download OpenVPN Connect

    OpenVPN in App Store

     

      3. Once OpenVPN Connect is installed, open it

      4. Type in openvpn.ias.edu under “URL” and next to “https://”

          Click “Next

    OpenVPN app URL page

      5. Use your IAS credentials to fill out the username and password

          Click import

    Importing profile to OpenVPN

      6. This will open a pop-up asking for your Duo passcode

          Exit the OpenVPN Connect app and open DUO Mobile

      7. Under your IAS account, click “Show” passcode 

          Click “Copy” passcode

      8. Reopen OpenVPN Connect and paste the passcode

          Click “Send”

    DUO passcode in OpenVPN

      9. “Allow” OpenVPN to add VPN Configurations

          This may open your Settings app

          Follow the instructions on your screen

    Allow OpenVPN to add new VPN Configurations

     

       10. Click on the OpenVPN Profile bar to connect to the VPN

       11. Enter your IAS Password and select OK

    enter password

     

       12. Enter your Duo passkey following the same process as in steps 3 and 4

       13. Congrats! You are now connected to the IAS OpenVPN

    youre connected!!!

     

    .pdf OpenVPN instructions for Android

    1. Install the OpenVPN app from the Play Store.
    OpenVPN app on Play Store

    2. Input the URL for our VPN: openvpn.ias.edu and click the “Next” button.

    app asking for URL

    3. Enter your IAS username (without @ias.edu) and your password, and hit Import. (You do not have to type anything in “Port” or check either of the boxes.)

    Username and password on OpenVPN app

    4. A box will pop up, prompting you to enter a passcode or type “push.” Make sure you have Duo installed on your device and set up with the IAS. Instructions to do so can be found here. Then type “push” in the box and click the “Send” button.

    You should get a notification on Duo. Go to the Duo app and select the “approve” button.

    pop-up with text "Enter Duo passcode or 'push'"

    5. You will then be returned to the main screen of the OpenVPN app, listing your new profile. Click the profile, enter your password, and select the "OK" button.

    profile shown to be disconnected and pop-up to enter password

    6. A connection request will pop up. Select the “Ok” button.

    connection request pop-up stating the permissions OpenVPN needs

    7. If a pop-up appears asking for a Duo passcode or “push,” follow the instructions in step 4. 

    pop-up asking user to enter Duo passcode or "push"

    8. OpenVPN is now set up and you are connected.

    connection stats on OpenVPN app

    Web VPN

    The preferred method of VPN access is by installing it to your device, however, you can also access IAS resources through a web-portal.

    In your preferred browser, type https://vpn.ias.edu in the search bar

    Enter your IAS credentials in the respective fields. If you have DUO setup, you will be prompted to enter your passcode or PUSH.

    VPN sign in page

    Once authenticate, you will be take to the  Homepage.  The list may differ from the image below depending on the associated School.

    Web VPN Homepage

     

    Click on the URL (the underscored words) of the site you would like to open

    Homepage links

    Legend

    Home takes you to the home page which is displayed below

    Preferences allows you to change the appearance and certain aspects of the site

    Help routes you to a page with further instruction

    Sign out will log you out of the VPN

    Homepage legend

    When accessing any of the VPN resources, this toolbar may appear in the top right or left corner of the screen

    Toolbar explanation

     

    To access Library resources, click on the Library Resources hyperlink

    Opening Library Resources

    A new tab will open with the available library resources. From here you can choose what resource you want to access and follow the instructions given in each link.

    Different library resources

     

    This feature is currently unavailable.

    To access your IAS email, click on the IAS Mail hyperlink

    Opening the email page

    A new tab will open. Enter your IAS credentials next to “Username” and “Password”. Click sign in and you will have access to your IAS email

    Mail sign in

     

    To change your IAS password, click on the Password Changer hyperlink

    Opening the password changer link

    From here, enter your current IAS credentials next to “Domain\user name” and “Current password”

    *Make sure that you write ias\ before your username. Ex: ias\jdoe

    You can then enter your new password next to “New password” and “Confirm new password”

    Hit submit and your password will update automatically

    Username, password, and new password change

     

    Pulse Secure Uninstall Guide

    1. Open the Start Menu, then type & open "Add or Remove Programs"
    2. For Pulse Secure and all its related programs, go one by one selecting and then uninstalling.
    3. Reboot if necessary.
    1. Make sure that the Pulse Secure client is not running.
    2. If it is running, right click on the icon and choose Quit.
    3. Open Finder.
    4. Browse to Applications and select Pulse Secure.
    5. Drag Pulse Secure to the recycling bin. The system may ask you for the administrator password to continue.
    6. Click Yes to remove your Pulse Secure configuration.
    1.  Locate the home screen that contains the Pulse Secure App.
    2. Long press until you see little X's in the top left hand corner of each app and they are shaking. Click on the X on the Pulse Secure Icon.
    3. Confirm the removal of the app by clicking on Delete word.
    4. After the uninstallation is complete, your icons will still be shaking.
    5. Click the Home button to return to normal.

    Once you have installed and tested the OpenVPN client, we recommend removing the old Pulse Secure application. Follow these steps to remove the client. Click to return to the main OpenVPN guide.

    1. Locate the Pulse Secure App in the launcher.
    2. Long click and drag Pulse Secure to the Uninstall option at the top of the screen and lift your finger.
    3. Confirm the deletion by selection "Ok".
    4. The application should now be uninstalled and gone from your launcher.

    Profile Removal

    1. Ensure you are not connected to the VPN
    2. Remove the profile
    3. Confirm the removal

       

    1. Ensure you are not connected to the VPN
    2. Remove the profile
    3. Confirm the removal
    1. Open the OpenVPN app and click the right arrow to the right of the profile you wish to delete.
    2. Click on the word "Delete" in the upper right hand corner of the screen.
    3. Click the red circled minus sign on the left portion of the screen.
    4. Click the red highlighted word "Delete" on the right hand portion of the screen.
    5. Verify that the profile is no longer present.

    .pdf OpenVPN Profile Removal Instructions for Android

    1. In the OpenVPN app, click the pencil symbol.

    profiles on OpenVPN app

    2. At the bottom of the screen, click “DELETE PROFILE.”

    Edit profile screen in OpenVPN app

    3. In the popup, select the “Yes” button.

    pop-up asking if user wants to delete profile

    4. The app will bring you back to this screen. Your profile is now removed.

    OpenVPN "import profile" page