Did anyone manage to get astaro's vpn-profile working an iphone using OS version 4, yet?
Is this a known issue or am I doing something wrong?
In my case, installing an VPN-profile on an iphone 3G (OS Version 4.0) does not set up any vpn-connections on the iphone. The profile is installed under Settings->General->Profile, there are just no VPN-connections under Settings->General->Network->VPN.
Cheers!
I am having the same issue. I have an iPhone 4, I can log into the user portal and download the VPN config with Safari but it does not stick. When I go into the network settings to connect to the VPN, there is nothing there.
I am running iOS4 and ASG v8 and cannot also import any new profiles. All my old profiles which I installed before updating work. However all new try's fail.
Ok I have 2 solutions, hopefully the first one works for you.
I seem to have found the issue, You cannot use brackets, once I removed this "(IPSEC)" from my customers profile connection name everything works fine again. grrrr!!!
Second Method....LONG way
Assumptions I assume you
* have a running Astaro server;
* OpenSSL installed on a work station;
* users already set-up; and
* VPN previously configured and working
Step 1 - Download and Install iPCU Download and install the iPhone Configuration Utility. This allows you to generate your own iPhone profiles to be installed by users. Download here:
Apple - Support - iPhone - Enterprise Step 2 - Download VPN Signing CA and Users Cert Login to your Astaro web admin and in the left hand menu click:
Remote Access > Certificate Management
In the right hand pane scroll down till you see your users certificate, mine was called rjet (X509 User Cert), click download and export as PKCS#12. Remember to use a password as this file contains the users private key. Save this file to your desktop.
Navigate to Certificate Authority, form here choose to download the VPN Signing CA, you will need to export the file as .pem, you will later convert this to .crt so the iPCU can understand use it. Save this file to your desktop
Step 3 - Convert VPN Signing CA from .pem to .crt You will need to have OpenSSL installed, most *nix (i.e. OS X and Ubuntu/Fedora) have this pre-installed.
In terminal navigate to your desktop and run the following command over your VPN Signing CA, mine is called VPNCA.pem
openssl x509 -in VPNCA.pem -inform PEM -outform DER -out VPNCA.crt
Step 4 - Create iPhone Profile Run the iPhone configuration Utility, navigate to “Configuration Profiles” and click “New”
In the General Section fill in everything i.e :
* Name: Work VPN
* Identifier: rjet.vpn.company-a.com
* Organization: company-a.com
* Description: This is your personalized Remote Access VPN configuration. Please continue by clicking the "Install" buttons
* Security: Always
Click the Credentials Section and click the (+) button on the right, you will need to add both the rjet.p12 file and your VPNCA.crt
Click the VPN Section and fill in the fields, example are:
* Connection Name: My VPN
* Connection Type: Must be IPsec (Cisco)
* Server: Must be a hostname of Astaro Box. i.e vpn.company-a.com
* Account: rjet
* Machine Authentication: Certificate
* Credentials: rjet.p12
Click save.
You can now deploy this profile using the iPhone cable directly attached the device or send the profile to an email address or install via Safari.
