VPN ÚTIA – External User Guide

                ℹ️ Before you begin: You should have received an email from the ÚTIA IT administrator with a registration link, and separately (by phone, SMS, or in person) a 6-digit PIN code. You will need both.
            

Install a TOTP authenticator app

Two-factor authentication (2FA) requires an authenticator app on your phone. If you don't have one yet, install any of the free apps listed below.

Install the OpenVPN client

You need the OpenVPN Connect client on the computer you'll use to connect. Download and install the version for your operating system (see links below).

Open the registration link

Click the link you received in the email. A form will appear asking for your PIN code.

⏰ The link has limited validity (usually 48 hours) and can only be used once. You have a maximum of 3 attempts to enter the PIN code.

Enter the PIN code

Enter the 6-digit PIN code you received from the administrator through a separate channel (phone, SMS, in person). The PIN was not included in the email – this is a security measure.

Set up OTP (one-time password)

After PIN verification, a QR code will appear. Scan it with your authenticator app. The app will start generating 6-digit codes that change every 30 seconds.

⚠️ Backup codes – write down the displayed one-time backup codes and store them in a safe place! You'll need them if you lose access to your phone.

Verify OTP and download configuration

Enter the current 6-digit code from your authenticator app. After successful verification, your configuration will be generated automatically and a download button for the .ovpn file will appear.

📅 The configuration has a limited validity (typically 1 year, but may be set shorter). You will find the exact expiry date in an email notification sent before expiration. To renew your access, contact the ÚTIA IT department – you cannot generate a new configuration on your own.

Connect to the VPN

Open OpenVPN Connect, import the downloaded .ovpn file, and start the connection. Each time you connect, you will be prompted for an OTP code from your authenticator app.

                        Username: your assigned username (ext_...)

                        Password: current 6-digit OTP code from the app

📱 Authenticator Apps (TOTP)

Google Authenticator

Android / iOS

Microsoft Authenticator

Android / iOS

Proton Pass

Android / iOS / Desktop

Ente Auth

Android / iOS / Desktop / Web

💻 OpenVPN Connect – Download Client

🪟Windows 🍎macOS 🤖Android 📱iOS

On Linux: sudo apt install openvpn or sudo dnf install openvpn, connect with sudo openvpn --config username-vpn.ovpn

Need help? Contact the ÚTIA IT department at root@utia.cas.cz. If you experience connection issues, please include your username and a description of the problem.

🔐 VPN ÚTIA – External User Guide