VPN Installation and Configuration of OpenVPN (Android)

Formal and Technical Conditions for Using VPN - General Information

To use OpenVPN, all of the following conditions must be met:

granted access to use VPN (details here)
installed and configured OpenVPN Connect application
valid certificate in the configuration of the OpenVPN Connect application
OpenVPN Connect application running and connection established

OpenVPN Connect uses a personal user certificate, which expires after 365 days.
After this time, a new personal certificate must be generated.
Details are available on this help page.
If the password for mojapg is changed after generating the personal certificate and before the expiration of the 365-day period, the login to the certificate occurs using the password on the day of downloading the personal certificate.

Before starting the installation, please note that the interface and button names during installation may differ slightly depending on the brand, model, and version of the system.

Installation and Configuration of OpenVPN Connect - on Android Systems

Download the OpenVPN Connect application for your version of the system from the app store (e.g., Play Store).
Download the configuration file for employees / students (choose the appropriate file).
If you are both an employee and a student - by default, use the file for employees.
Download the main PG certificate pg-ca.pem.
Go to the personal certificate generator (you will need to log in with your Moja PG credentials).
If you are both an employee and a student, after logging in, you will see an option to choose the type of certificate to be generated (certificate for employee or for student). Choose according to the file downloaded earlier in point 2 of this instruction. However, by default, the correct choice will be the certificate for employees.
Enter your password (the same as for the Moja PG portal), generate the certificate, and download it.
After downloading, your phone may automatically want to install the certificate; in this case, check the appropriate boxes during configuration (e.g., VPN certificate) and extract it by entering the previously provided password.
If the phone did not automatically install the certificate, go to subsection a, otherwise proceed to point 9.
1. Locate in the phone's memory or on the SD card (e.g., using File Manager, a similar app, or directly in the browser's download history) the downloaded personal certificate file certyfikat_uzytkownika.p12 (unless otherwise set by the browser, browsers typically save downloaded files in the Downloads folder).
  Downloaded files can easily be located using the download history in the browser. The location of the history is shown below using the example of the Google Chrome browser.
  
  After clicking on Downloaded files, a list of downloaded files will be displayed. Depending on the browser you have, in each row with a downloaded file, there will be an option with three dots that allows you to take actions regarding the downloaded file.
2. Click on the downloaded personal certificate certyfikat_uzytkownika.p12 - a certificate extraction window will open. Select the VPN certificate and enter the certificate password (the same password as for Moja PG) and continue. In the next window, you will have the option to give it a name, enter a friendly name like krótkilogin@pg.edu.pl and save the changes.
Make sure that when downloading the root certificate, no extension has been added to its name. The file should be named pg-ca.pem if it is named, for example, pg-ca.pem.crt or otherwise, rename it using the three vertical dots icon, and then Rename. If you don't know how to find the certificate, look at subpoint a in point 8.
Open the OpenVPN Connect application from the Play Store or the app icon on your phone's desktop. Select any notification preferences, review the terms of use, and accept them.
On the Get connected screen (the Import Profile tab), go to the Upload File tab and click Browse.
Select two files simultaneously from the phone memory or external card:
1. client_pracownik.ovpn or client_student.ovpn (depending on the choice in point 2.)
2. pg-ca.pem
  Confirm the selection of files.
Assign a profile name or continue unchanged and accept any system messages.
After importing the configuration, a message will appear regarding the unreadability of the user certificate. In this case, click Select certificate, and then choose the user certificate that was previously installed.
After completing the configuration, OpenVPN Connect should establish a connection. If it does not, go to the app, and then click on the switch on the left side of the previously created profile. A loading icon will appear in the middle of the switch; when the loading is complete, the switch will change color to green, and the text Connected will appear above it.