VPN on Windows

ZIM HilfeWiki - das Wiki
Die deutsche Version finden Sie auf der Seite VPN unter Windows

VPN (Virtual Private Network) is needed if you want to use services from outside the University of Paderborn that are only accessible within the university network. VPN guarantees secure access to the University network through other networks (dial-in via other providers, external company or university networks).

You need VPN if you[Bearbeiten | Quelltext bearbeiten]

  • want to access licensed databases of the University Library,
  • want to access a Network drive/ group storage
  • use the green sockets within the university (these are only available via VPN for security reasons)
  • use a license server of the university,
  • want to access secured pages of the university,
  • would like to work with the CMS TYPO3 from home.


You do not need VPN if you[Bearbeiten | Quelltext bearbeiten]

  • want to read your e-mails on webmail,
  • want to send e-mails via the ZIM mail server (see Mail).


What needs to be done?[Bearbeiten | Quelltext bearbeiten]

  • Install personal network certificate
  • Install OpenVPN.
  • Start OpenVPN
  • Download configuration file:

Note: You can click on "Download" here and download your configuration file. This is not a screenshot ;-)

  • Import configuration file
  • Establish a VPN connection

Step-by-step instructions[Bearbeiten | Quelltext bearbeiten]

Install network certificate[Bearbeiten | Quelltext bearbeiten]

In order to use OpenVPN, a personal network certificate must be installed on your PC.

Are you already using the Eduroam WiFi network on this PC?

  • Then you already have a personal network certificate. Skip this step.


Are you not using the Eduroam WiFi network on this PC yet?

Access using a browser, e.g. Firefox or Edge, go to the service portal and log in with your user name and password from your university account.

  • Go to Benutzerverwaltung and then Netzwerkeinstellungen.


Eduroam-unter-android-4.png


  • Click Neues Zertifikat erstellen.


Netzwerkzertifikat-container-v2.png


  • Give the certificate a unique name (e.g.: cell phone)
  • For Windows 11, select Version 2 as the file format.
  • For older versions such as Windows 10 please use version 1.
  • Then click on Neues Zertifikat zusenden.


Netzwerkzertifikat-download.png


  • A new network certificate has been created for you.
  • First copy the Import Password to the clipboard.
  • Now click on 'Download Network Certificate.


After saving it on the computer, the network certificate must be installed under the account that is to be used with Eduroam. Open the certificate with a double click. The certificate import wizard then starts automatically.

Eduroam-windows11-01.png


  • Click on Continue.


Eduroam-windows11-02.png


  • Paste the import password that we just copied.
  • Leave the default settings intact.
  • Note: It is not allowed to tick "Activate high security for the private key". The Windows WLAN client currently does not support this function and therefore no connection to eduroam would be possible.
  • Then click Next


  • In the following window, if necessary, click on Next and finally on Finish.


Eduroam-windows11-03.png


  • If a security warning appears, click Yes.


Eduroam-windows11-04.png


  • Now click on "OK".


Note: Now open the same certificate again and install it a second time. This allows us to work around an error in the Windows certificate manager. Do not create a new certificate for this!


Note: Only one network certificate from the University of Paderborn may be installed. Multiple certificates can cause problems. More about this here.

Download OpenVPN[Bearbeiten | Quelltext bearbeiten]

Now download the OpenVPN program from the manufacturer's website.
https://openvpn.net/community-downloads/

ATTENTION: DO NOT install the BETA version!
Download the program here. Not via Get OpenVPN!


Install OpenVPN[Bearbeiten | Quelltext bearbeiten]

Now let's install the program.

Step 1: Click on "Install Now ".
Step 2: A security warning appears first User Account Control. Click "Yes".
Step 3: The installation is complete. Click "Close".


After successful installation, the new “OpenVPN GUI” icon will appear on the desktop.

0px Step 8: The OpenVPN client is started using this symbol.


Download configuration file[Bearbeiten | Quelltext bearbeiten]

Download the configuration file, select the VPN you want to connect to in the box below and click on Download. Normally "Uni-VPN (Standard)" should be the right choice, but if you have problems with the connection, try "Uni-VPN-TCP" instead.
Note: You can click "Download" here and download your configuration file. This is not a screenshot ;-)


  • Accessing online resources may require that you route all network traffic through the tunnel.
  • You do not need this option to simply access the network drives.

Start OpenVPN[Bearbeiten | Quelltext bearbeiten]

If OpenVPN is not already started (see tray icon), start it using the "OpenVPN GUI" icon on your desktop.

OpenVPN-25 Win10 Install-4.png


  • The OpenVPN client is started via this symbol.


OpenVPN-25 Win10 Install-5.png


  • An icon with a small lock will now appear at the bottom of the taskbar.
  • Do not confuse it with the Windows network icon.


Load configuration[Bearbeiten | Quelltext bearbeiten]

Open the configuration file with a double click. Alternatively, you can also do the following:

OpenVPN-Win10-1.png


  • Right-click on the OpenVPN icon at the bottom right of the task bar.
  • Then click Import File.



  • Now open the file "OpenVPN-UPB-NG_*.ovpn" - We have just downloaded it.


Establish connection[Bearbeiten | Quelltext bearbeiten]

Now we set up a VPN connection.

Step 3: Please right-click on the icon and then click "'Connect"/"Connect"" to establish a connection to the VPN server.
Step 4: When you run the program for the first time, the Windows Firewall is required If necessary, the consent to trust OpenVPN in the future. Please click on "Allow access".


Step 5: Finally, your computer will be assigned an IP address and the icon turns green.


You can see the status of the VPN by the color of the symbol:

VPN-Win10-4.png No VPN connection active
VPN-Win10-5.png VPN connection is being established
VPN-Win10-3.png VPN connection active

As soon as a green status is displayed, you are connected to the internal university network.


Bei Fragen oder Problemen wenden Sie sich bitte telefonisch oder per E-Mail an uns:

Tel. IT: +49 (5251) 60-5544 Tel. Medien: +49 (5251) 60-2821 E-Mail: zim@uni-paderborn.de

Das Notebook-Café ist die Benutzerberatung des ZIM - Sie finden uns in Raum I0.401

Wir sind zu folgenden Zeiten erreichbar:


Mo-Do Fr
Vor-Ort-Support 08:30 - 16:00 08:30 - 14:00
Telefonsupport 08:30 - 16:00 08:30 - 14:00


Das ZIM:Servicecenter Medien auf H1 hat aktuell zu folgenden Zeiten geöffnet:

Mo-Do Fr
08:00 - 16:00 08:00 - 14:30
Cookies helfen uns bei der Bereitstellung des ZIM HilfeWikis. Bei der Nutzung vom ZIM HilfeWiki werden die in der Datenschutzerklärung beschriebenen Cookies gespeichert.