How to Install and Set Up OpenVPN Connect on Windows

To install OpenVPN Connect on Windows, download the official client, run the installer, import the connection profile supplied by your VPN administrator, and switch the profile on. OpenVPN Connect is the client application; it does not include a VPN service or create a working profile for you.

What you need before installing

• A supported Windows 10 or Windows 11 computer.
• Permission to install software and approve the Windows User Account Control prompt.
• A trusted OpenVPN connection profile from your workplace, VPN provider or server administrator.
• The VPN username, password, certificate or multi-factor authentication method required by that profile.

A connection profile is normally a text file ending in .ovpn. It contains the server address, protocol and certificate settings needed by the client. Do not download profiles from unknown websites or share a profile containing private keys.

Step 1: Download and install OpenVPN Connect

1. Open the official OpenVPN Connect for Windows page.
2. Download the current Windows installer. Access Server users can instead sign in to their organisation’s Client Web UI and download its bundled installer.
3. Open the downloaded installer, accept the licence terms and choose Install.
4. When Windows asks whether the installer may make changes, confirm that the publisher and filename are expected, then choose Yes.
5. Choose Finish and launch OpenVPN Connect from the Start menu or system tray.

On first launch, review the application notices and licence. Keep OpenVPN Connect updated so the client receives current compatibility and security fixes.

Step 2: Import the OpenVPN profile

OpenVPN Connect supports file and URL imports. Use the method provided by the administrator:

• Import from file: open My Profiles, choose the add or upload option, select the trusted .ovpn file and confirm the import.
• Drag and drop: drag the .ovpn file into the OpenVPN Connect window and confirm.
• Double-click: on supported Windows installations, double-clicking an associated .ovpn file opens the import confirmation.
• Import from URL: enter the server URL only when the VPN administrator or provider supports this method.

If the profile refers to separate certificate or key files, keep them in the same folder during import. Profiles must use UTF-8 or ASCII text and remain below OpenVPN Connect’s 256 KB import limit. A unified profile with certificates and keys embedded is usually easier to manage securely.

Step 3: Connect and verify the VPN

1. Select the imported profile and choose Connect.
2. Enter the VPN account password, private-key password or one-time code when requested. These can be different credentials.
3. Approve only the expected Windows networking prompt.
4. Wait for OpenVPN Connect to report Connected.

Test the resource the VPN is meant to provide, such as an internal website, server or private DNS name. If the profile routes all internet traffic, compare the public IP address before and after connecting. A split-tunnel profile may intentionally leave the public internet route unchanged.

Disconnect or replace a profile

Use the profile switch to disconnect and wait until the client reports Disconnected. When an administrator supplies a replacement profile, import and test it before deleting the old one. Store profiles securely because they can contain certificates or private keys.

Troubleshoot OpenVPN Connect on Windows

The OVPN profile will not import

Confirm the file uses the .ovpn extension, UTF-8 or ASCII text and is under 256 KB. Place referenced CA, certificate and key files beside it, or ask the administrator for a unified profile. Review the import message instead of repeatedly downloading profiles from unofficial sources.

Authentication failed

Check the VPN username, account password, private-key password and one-time code separately. Confirm that the account is active and the profile belongs to the intended server. Contact the VPN administrator rather than changing certificate or authentication directives blindly.

Connected, but there is no internet

First determine whether the profile uses full tunnelling or split tunnelling. Reconnect, then check the server’s routes, gateway and DNS settings. If only internet access fails, the VPN gateway may not be forwarding or translating client traffic correctly.

Internal names do not resolve

Try the internal service by IP address. If the IP works but its name does not, check the DNS servers and search domains pushed by the VPN. Local security software or another VPN client can also override Windows DNS settings.

The client repeatedly reconnects

Check the normal internet connection and the OpenVPN Connect log. Captive Wi-Fi portals, blocked UDP traffic, unstable wireless service, expired certificates or an unreachable server can cause reconnect loops. Ask whether an approved TCP profile is available when the network blocks UDP.

The installer or tunnel driver fails

Use a supported Windows release, run the official installer with administrator approval, restart Windows and temporarily investigate whether endpoint-security software blocked the signed installer or networking component. Do not permanently disable security software to force installation.

Related OpenVPN guides

Using an Apple computer? Follow our guide to install OpenVPN Connect on macOS. If you manage the VPN endpoint, see how to install an OpenVPN server on Ubuntu.

Official references

• OpenVPN: Windows installation guide
• OpenVPN Connect for Windows and supported systems
• OpenVPN: Import a connection profile
• OpenVPN Connect troubleshooting

OpenVPN Connect is now installed with a trusted profile and a verified connection. Keep the application and profile current, and contact the VPN administrator when server routes, certificates or authentication policies need to change.