Configure VPN Connection on Windows (OpenVPN)
Requirement!
To set up the VPN, you need a second factor (abbreviation: 2FA or MFA). This is an additional security layer in addition to your HTW account password. You can set up the second factor within the account service using the following guide:
Multi-Factor Authentication
It is strongly recommended not to run any additional VPN clients in parallel!
Step 1: Download OpenVPN and the configuration file
Download the OpenVPN client and the certificate from our download portal (you need to log in with your HTW account). Then return to this guide.
To download the OpenVPN client and the VPN profile
Step 2: Install the VPN client
Start the setup (open the file openvpn-connect-<version>_signed.msi) that you downloaded in step 1 and click "Next" to continue.
Step 3: Confirm the EULA
Accept the license agreement (EULA) and click "Next" to proceed with the installation.
Step 4: Start installation
Click "Install" to start the installation.
Confirm any prompts that may appear in this step.
Step 5: Complete the installation
Complete the installation by clicking "Finish."
Step 6: Confirm the EULA
The OpenVPN program should start automatically after installation.
After setup, the OpenVPN license agreement (EULA) will be displayed. Click "Agree" to confirm it.
Step 7: Load the configuration file
Upload the configuration file from step 1 either via "Upload File" or by dragging and dropping it into the window.
Step 8: Confirm import
Confirm the import by clicking on "Import".
Step 9: Establish a VPN connection
Click on the "Connect" button.
Step 10: Login
In this window, enter your HTW username (without @htw-berlin.de; e.g., s0000001 or amuster) in the "Username" field.
Enter your password in the "Password" field. Afterwards, click on "Enter".
Step 11: Second Factor
Enter the one-time password (numeric code) generated by your authenticator app in this view.
Then click "Send".
Hint: You have set up this app before by using our instructions (see the blue-bordered "Requirement!" box at the top of this page).
Step 12: Successfully Connected
If everything was entered correctly, you will see "Securely Connected" in the OpenVPN client.
When the window is closed, the application will continue to run in the background.
NO openVPN possible in eduroam or the HTW network!
In the entire HTW Berlin network (including the eduroam WLAN), an OpenVPN connection cannot be established (a timeout is displayed in the OpenVPN client).
Its use is mainly intended for outside the university.
in case of a slow or unstable OpenVPN connection/websites cannot be accessed
User experience has shown that you may experience speed or stability problems with OpenVPN if your Internet connection does not have a public IPv4 address but uses Dual-Stack Lite instead, which means multiple customers share a single IPv4 address.
If you notice that your OpenVPN connection is very slow or unstable, please try using a different Internet connection (e.g. the mobile hotspot of your smartphone via the mobile network). If the problem does not exist there, you might contact your Internet provider and ask them to provide you with your own IPv4 address for your Internet connection. A dynamic IPv4 address is sufficient for this; a fixed IP address (often offered for a fee) is not required.
Uninstallation of old VPN clients
After completing the installation, we recommend uninstalling any old installations of the Cisco AnyConnect program (if you used our old VPN client).