Setting up OpenVPN in BeAdmin

OpenVPN is a time-tested, open-source solution for building secure VPN connections. It creates encrypted tunnels between devices, protecting your internet traffic and ensuring maximum privacy.

Running your own VPN server provides the highest level of privacy and stable high-speed performance that isn’t affected by the load on public VPN services. In the BeAdmin control panel, OpenVPN uses certificate-based authentication with EasyRSA PKI, giving each user a unique certificate for enhanced security.

Activating the OpenVPN module

First, prepare the server side. BeAdmin automatically installs all required dependencies.

1. Log in to your BeAdmin panel and go to the OpenVPN section.
2. Click the Install button.
3. Wait for the process to finish. The system will automatically configure the environment and prepare the PKI infrastructure.

OpenVPN Module Interface

Adding a new user

To grant access to the VPN tunnel, create a user profile.

1. Click Create User.
2. In the Email field, enter the email address where the VPN configuration file will be sent.
3. In the Name field, enter any name you prefer.
4. Click Create. The user will appear in the list and be ready for connection.

User List for VPN Connections

Connecting on your device

We recommend using the official OpenVPN Connect app, available for:

• Android
• iOS
• Windows and macOS

If the app is not installed yet, download and install it on your device (smartphone, computer, or tablet).

To obtain the configuration:

1. Go to the Users section.
2. Click the Settings (gear icon) next to the desired user.
3. Choose one of the following:
   • Download the .ovpn configuration file
   • Send the configuration file via email

Getting VPN Connection

Open the OpenVPN Connect app, tap Import (or the “+” icon), and select the downloaded .ovpn file.

Managing users

You can temporarily disable a user by toggling the switch next to their name in the user list. When disabled, the user’s certificate is revoked and they can no longer connect.

If you re-enable a disabled user, a new certificate will be issued. This makes the previous configuration file invalid — the user will need to download a new .ovpn file and import it again on their device.