SETUP Instructions

  • For IKEv2 setup (instructions for alternative protocols are emailed individually):

    First, securely transfer the provided file to your Mac, then double-click and follow the prompts to import as a macOS profile.

    If your Mac runs macOS Big Sur or newer, open System Preferences and go to the Profiles section to finish importing.

    For macOS Ventura and newer, open System Settings and search for Profiles.

    When finished, check to make sure "IKEv2 VPN" is listed under System Preferences -> Profiles.

  • For IKEv2 setup(instructions for alternative protocols are emailed individually):

    Windows 8, 10 and 11 users can automatically import the IKEv2 configuration:

    Securely transfer the .p12 file to your computer, then import it into the certificate store.

    To import the .p12 file, run the following from an command prompt:

    certutil -f -importpfx "\path\to\your\file.p12" NoExport

    It is recommended to create the VPN connection using the following commands from a command prompt, for improved security and performance.

    To create a VPN connection (replace 'Your VPN Server IP (or DNS name)' with your own value):

    powershell -command ^"Add-VpnConnection -ServerAddress 'Your VPN Server IP (or DNS name)' ^
      -Name 'My IKEv2 VPN' -TunnelType IKEv2 -AuthenticationMethod MachineCertificate ^
      -EncryptionLevel Required -PassThru^"

    If you encounter issues, please email us or reference https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections

  • For IKEv2 setup(instructions for alternative protocols are emailed individually):

    First, securely transfer the provided file to your iOS device, then import it as an iOS profile.

    To transfer the file, you may use AirDrop, or Upload to your device (any App folder) using File Sharing.

    After that, tap the downloaded file and go to the "Settings" App to import.

    When finished, check to make sure "IKEv2 VPN" is listed under Settings -> General -> VPN & Device Management or Profile(s).

  • For IKEv2 setup(instructions for alternative protocols are emailed individually):

    For Android 11+:

    Connection can be done using the native IKEV2 client - specific instructions are coming (very) soon.


    For older Android versions:

    Android users can connect using strongSwan VPN client.

    Securely transfer the provided .sswan file to your Android device. Install strongSwan VPN Client from Google Play, F-Droid or strongSwan download server.

    Launch the strongSwan VPN client.
    Tap the "more options" menu on top right, then tap Import VPN profile.

    Choose the .sswan file you transferred from the VPN server.

    Note: To find the .sswan file, tap the three-line menu button, then browse to the location you saved the file.

    On the "Import VPN profile" screen, tap IMPORT CERTIFICATE FROM VPN PROFILE, and follow the prompts.

    On the "Choose certificate" screen, select the new client certificate, then tap Select. Tap IMPORT. Tap the new VPN profile to connect.

    You can choose to enable the "Always-on VPN" feature on Android.
    Launch the Settings app, go to Network & internet -> Advanced -> VPN, click the gear icon on the right of "strongSwan VPN Client", then enable the Always-on VPN and Block connections without VPN options.

  • The provided .p12 file can be used for Linux setup. Please email us if you need specific Linux setup details.

  • Please email us – we will do our best to provide you with personalized setup details.

Protocol Preferences:

VPN protocols are sets of rules and specifications used to establish and maintain secure connections between devices over the internet. Each has its own strengths, weaknesses, and use cases, so the choice of protocol depends on factors such as security requirements, compatibility, and performance considerations. Below are some examples of popular protocols we offer:

IKEv2

IKEv2 is a modern VPN protocol that provides strong security, stability, and fast connection times. It is often used in mobile VPN applications due to its ability to seamlessly handle changes in network connectivity (such as switching between Wi-Fi and cellular networks).

L2TP/IPsec

L2TP/IPsec combines the features of the L2TP and IPsec protocols to provide a secure VPN connection. L2TP creates a tunnel between two endpoints, while IPsec provides encryption and authentication. L2TP/IPsec is widely supported on various operating systems and devices.

OpenVPN

OpenVPN is an open-source VPN protocol known for its flexibility, reliability, and strong security features. It supports both UDP and TCP connections and can be implemented on various platforms, including Windows, macOS, Linux, and mobile devices.

WireGuard

WireGuard is a relatively new VPN protocol known for its simplicity, speed, and security. Designed to be lightweight and efficient, it offers strong encryption and modern cryptographic protocols. WireGuard is gaining popularity as a VPN solution for its ease of implementation and performance benefits.

IPSEC

IPsec is a suite of protocols used to secure internet communications at the IP layer. It provides authentication, encryption, and integrity protection for VPN connections. IPsec can be used in tunnel mode or transport mode and is commonly used in site-to-site VPNs and remote access VPNs.

SSTP

SSTP is a VPN protocol developed by Microsoft that uses SSL/TLS encryption to secure VPN connections. It is designed to provide secure communication over HTTP and HTTPS ports and is commonly used in Windows-based VPN setups.

Don’t see the protocol you want? We also offer compatibility with additional protocols not listed above (e.g. PPTP), selectable during checkout.