---
type: concept
title: VPN Android Configuration
tags: [vpn, android, security, authentication]
related: [nutzerzertifikate, p12-file, openvpn-connect]
created: 2026-06-30
updated: 2026-06-30
sources: ["output/rz_uni_greifswald_de_dienste_technische_infrastruktur_vpn_android.md"]
---

# VPN Android Configuration

The configuration of VPN access on Android for the Universität Greifswald is a multi-layered process that requires both system-level security credentials and application-level configuration.

## Authentication Layers
To establish a connection, the system verifies three distinct pieces of information:
1. **URZ Account**: Username and password for primary authentication.
2. **User Certificate**: A [[p12-file]] that proves the identity of the device/user.
3. **VPN Profile**: A configuration file containing the server addresses and encryption parameters of the URZ gateway.

## Critical Order of Operations
A key technical requirement is that the **User Certificate must be imported into the Android system settings before the VPN profile is configured in the app**. If the profile is imported first, the "Select Certificate" step in the OpenVPN Connect app will fail because the app cannot find the required certificate in the system store.

## Setup Process
1. **Installation**: Install OpenVPN Connect.
2. **Profile Reset**: Delete old profiles to avoid conflicts.
3. **Certificate Import**: Import the `.p12` file into Android as a "VPN & App User Certificate".
4. **Profile Import**: Load the VPN profile into the app and enter URZ account credentials.
5. **Linking**: Select the imported certificate within the app to finalize the setup.
