Good day!
Is it possible to deploy an .ovpn Profile on a device that is already enrolled? OpenVpn client is installed on the android already.
Many thanks,
Bero
This thread was automatically locked due to age.
Good day!
Is it possible to deploy an .ovpn Profile on a device that is already enrolled? OpenVpn client is installed on the android already.
Many thanks,
Bero
Hello Bero,
Thank you for reaching out to the Sophos Community.
Do you know if the profile that will be deployed onto the mobile device is an MDM profile that will apply to the device as a whole, or is the profile specific to the OpenVPN application only?
If you have a test device, I recommend trying this out to see how it behaves. If the OpenVPN profile behaves similar to that of an MDM profile, there’s a chance that it may over-write the Sophos Mobile Control configurations.
Some information I was able to find on how to deploy an OpenVPN profile can be found here.
App developers also have the option to enable a Managed Configuration to be applied to the app upon deployment. It looks like this option is not enabled by the developer of OpenVPN.
The current options we have show it is possible add VPN settings, but the following article indicates that "Managed Configuration" will need to be possible for this to work.
- VPN configuration (Android Enterprise device policy)
Could you provide me with the format in which the OpenVPN profile is stored? Is this a certificate that gets installed on the mobile device, or is it something different? Have you had a chance to test the way this normally works outside of the MDM?
In order to configure the Open VPN application directly, the developer will need to enable "Managed Configuration" for the app.
If you are looking for another way to distribute the files to the devices, it is also possible to do so using the "Sophos Secure Workspace" application, however, it may be easier to email the files to your endusers.