πŸ” VPN ÚTIA – Connection Guide

For staff members with eduID / Shibboleth access

Install a TOTP authenticator app

Two-factor authentication (2FA) requires an authenticator app on your phone. If you don't have one yet, install any of the free apps listed below.

Install the OpenVPN client

You need the OpenVPN Connect client on the computer you'll use to connect. Download and install the version for your operating system (see links below).

Log in to the VPN portal

Open the portal URL in your browser and sign in using your institutional account (eduID).

🌐 https://ungol.site.cas.cz/vpn

Set up OTP (one-time password)

The portal will display a QR code. Scan it with your authenticator app. The app will start generating 6-digit codes that change every 30 seconds.

⚠️ Backup codes – the portal will also show one-time backup codes. Write them down and store them in a safe place! You'll need them if you lose access to your phone.

Verify your OTP code

Enter the current 6-digit code from your authenticator app. After successful verification, the configuration download will become available.

Download your configuration (.ovpn)

Click the download button. A file named username-vpn.ovpn will be saved, containing everything needed for connection – certificate, key, and server settings.

πŸ“… The configuration is valid for 1 year. After expiry, log in to the portal again and generate a new configuration. You will receive email notifications 10 days and 3 days before expiration.

Connect to the VPN

Open OpenVPN Connect, import the downloaded .ovpn file, and start the connection. Each time you connect, you will be prompted for an OTP code from your authenticator app.

Username: your login name
Password: current 6-digit OTP code from the app


πŸ’» OpenVPN Connect – Download Client

On Linux: sudo apt install openvpn or sudo dnf install openvpn, connect with sudo openvpn --config username-vpn.ovpn