Instrukcja obsługi OpenVPN dla pracowników UMK/en

Spis treści

OpenVPN is available to employees who install their individual VPN profile. this service enables authorized access to:

mail servers, in case your internet service provider makes it unfeasible (eg. classifies sent mail as spam)
select administrative services, such as USOSadm

It is not required to relay your IP addres to Dział Usług Sieciowych in order to access USOSadm and XPrimer.

Administration employees' access to workstations via remote desktop (RDP) is regulated by the following ordinance: ZARZĄDZENIE Nr 42 Kanclerza Uniwersytetu Mikołaja Kopernika w Toruniu z dnia 31 grudnia 2021 r.
An administration employee is described as a person employed in a position specified in
section 10, item 1.1 of the NCU Organizational Regulations

In order to gain access to your workstation via RDP you must first relay your IP address
to Dział Sieci Lokalnych i Monitoringu.

If your workstation has ESET (...) Security installed you might need to configure it to allow RDP access. For assistance in configuring ESET please contact Dział Sieci Lokalnych (pomoc@uci.umk.pl or 56-611-2727).

Your workstation's IP address can be obtained by visiting https://ip.uci.umk.pl/

You can obtain a configuration profile from the VPN profile server (we recommend using the save link as function)

Install the OpenVPN client. Available at https://openvpn.net/community-downloads/
(we recommend using the newest release)
Save the downloaded VPN profile in the OpenVPN/config subfolder of the user's main directory.
Launch OpenVPN GUI (it should run automatically from next system boot onwards)
Find the OpenVPN GUI icon in the taskbar (is is most likely hidden in the system tray, which is opened by clicking on the arrow on the right side of the taskbar).
Right-click on it, then select connect from the drop down list
You will be asked to enter a password the first time you try to connect - enter the password you have downloaded from the VPN profile server and select Save password if you don't want to enter it each time.

Download Tunnelblick https://tunnelblick.net/downloads.html - we recommend using the latest stable version.
Install the app by clicking on the dmg file, followed by the Tunnelblick icon:
- click Open to confirm that you want to open a file downloaded from the internet
- a Welcome to tunnelblick window will pop up - select continue
- enter your password to proceed with the installation
A Welcome to tunnelblick window will pop up, informing no VPN configuration was found -
select I have configuration files.
In the Add configuration window select OK.
Drag the .ovpn configuration file you have downloaded earlier over the Tunnelblick icon in the top menu bar. A window will pop up asking if you want to install the configuration for all users - the default and recommended option is to install it for the current user.
Enter your password to install the configuration.
Click on the Tunnelblick icon in the top menu and select Connect VPN.
You will be asked to enter a password the first time you try to connect - enter the password you have downloaded from the VPN profile server and select Save in Keychain if you don't want to enter it each time.
You can ignore all warnings that may appear during Tunnelblick's installation.