📘

Connect to Ultra OpenVPN

All Ultra.cc plans include complimentary OpenVPN access. You can use it to route a supported device’s internet traffic through your Ultra service.

This guide explains how to download your Ultra OpenVPN configuration and connect from Android, iOS, Linux, macOS, or Windows.

The Ultra OpenVPN service currently supports IPv4 only. Disable IPv6 on your device or network interface if it prevents the VPN from connecting.

If a previously working profile stops connecting, download a new configuration from the User Control Panel and import it again.

Download an OpenVPN Configuration

Log in to the User Control Panel.
Open your service.
Select the Connect tab.
Find OpenVPN access.
Download one of the three available configurations.

Each configuration should be used on one device.
The three configurations allow up to three devices to connect simultaneously.

Extract the downloaded .zip archive.

The extracted archive contains two versions of the OpenVPN profile:

The .ovpn file references the accompanying certificate and key files. Keep these files in the same folder when using this profile.
The .conf file contains the required certificates and keys inside the profile. Use this version for mobile devices and clients that import only one file.

To create a self-contained profile:

Make a copy of the .conf file.
Rename the copy from {username}-{configuration-number}.conf to {username}-{configuration-number}-mobile.ovpn.
Confirm that the final filename ends in .ovpn, not .ovpn.conf.

Connect from Android

This section explains how to connect from Android using OpenVPN Connect.

Install OpenVPN Connect

Install OpenVPN Connect from Google Play.
Open OpenVPN Connect.
Allow notifications if you want to receive connection-status notifications.
Tap Agree to accept the Data Collection Policy.

Transfer the Configuration

Download the OpenVPN configuration directly from the User Control Panel, or transfer it from another device.
Extract the downloaded .zip archive in the Files app.
Locate the self-contained .conf file.
Rename the file so that it ends in .ovpn.

For example, rename {username}-2.conf to {username}-2-mobile.ovpn.

Import the Profile

Open OpenVPN Connect.
Open the menu.
Select My Profiles.
Tap the add icon.
Select Upload File.
Browse to the renamed .ovpn file.
Select the file and confirm the import.
Tap the profile switch.
Allow Android to create the VPN connection when prompted.

If the profile does not import or connect, confirm that you renamed the self-contained .conf file. The smaller .ovpn file may depend on separate certificate and key files.

Confirm the Connection

Note your public IPv4 address before connecting.
Connect to the OpenVPN profile.
Visit What Is My IP Address.
Confirm that the displayed IPv4 address has changed to the address used by your Ultra service.

Connect from iOS or iPadOS

This section explains how to connect from an iPhone or iPad using OpenVPN Connect.

Install OpenVPN Connect

Install OpenVPN Connect from the App Store.
Open OpenVPN Connect.
Allow notifications if you want to receive connection-status notifications.
Tap Agree to accept the Data Collection Policy.

Transfer the Configuration

The recommended method is to download the configuration from the User Control Panel and save it in the Files app.

You can also transfer the files from a computer:

On current versions of macOS, use Finder to transfer the files to your device.
On Windows or older versions of macOS, use the File Sharing section in iTunes.
Select OpenVPN as the destination application.
Transfer the OpenVPN configuration files to the device.

Prepare the Mobile Profile

Extract the downloaded configuration archive.
Locate the self-contained .conf file.
Rename it from {username}-{configuration-number}.conf to {username}-{configuration-number}-mobile.ovpn.
Confirm that the final filename ends in .ovpn.

Do not import the smaller .ovpn file if it references separate certificate and key files. iOS and iPadOS may not make those files available to OpenVPN Connect. Import the self-contained .conf file after renaming it to .ovpn.

Import the Profile

Open OpenVPN Connect.
Open the menu.
Select My Profiles.
Tap the add icon.
Select Upload File.
Browse to the renamed .ovpn file.
Select the file and confirm the import.
Tap the profile switch.
Allow OpenVPN Connect to add a VPN configuration when prompted.

Troubleshoot the Connection

If the profile imports but does not connect:

Delete the existing profile from OpenVPN Connect.
Download a fresh configuration from the User Control Panel.
Recreate the self-contained .ovpn profile and import it.
Temporarily disable iCloud Private Relay:

Open Settings.
Tap your name.
Select iCloud.
Select Private Relay and disable it.

Disable Limit IP Address Tracking for the current Wi-Fi network:

Open Settings.
Select Wi-Fi.
Tap the information icon beside the connected network.
Disable Limit IP Address Tracking.

Confirm the Connection

Note your public IPv4 address before connecting.
Connect to the OpenVPN profile.
Visit What Is My IP Address.
Confirm that the displayed IPv4 address has changed to the address used by your Ultra service.

Connect from Linux

This section uses commands for Debian- and Ubuntu-based distributions. Package names and installation commands may differ on other distributions.

Install OpenVPN

Open a terminal.
Update the available package information and install OpenVPN:

sudo apt update
sudo apt install openvpn unzip ca-certificates

Prepare the Configuration

Open the directory containing the downloaded archive:

cd ~/Downloads

Extract the archive:

unzip "{username}-{configuration-number}.zip"

Open the extracted directory:

cd "{username}-{configuration-number}"

Make a copy of the self-contained .conf profile and rename it:

cp "{username}-{configuration-number}.conf" "{username}-{configuration-number}-mobile.ovpn"

Start OpenVPN

Start OpenVPN using the self-contained profile:

sudo openvpn --config "./{username}-{configuration-number}-mobile.ovpn"

Wait for the following message:

Initialization Sequence Completed

Keep the terminal open while the VPN is connected.
Press Ctrl+C to disconnect.

You can run OpenVPN inside screen or tmux if you need the process to remain active after closing the current terminal session.

Confirm the Connection

Open a separate terminal while OpenVPN is running.
Check your public IPv4 address:

curl -4 <https://icanhazip.com>

Confirm that the returned address is the address used by your Ultra service.

Connect from macOS

This section explains how to connect from macOS using Tunnelblick.

Install Tunnelblick

Visit Tunnelblick Downloads.
Download the current stable release.
Open the downloaded disk image.
Install and open Tunnelblick.

Prepare the Configuration

Extract the OpenVPN configuration archive.
Locate the self-contained .conf file.
Rename it from {username}-{configuration-number}.conf to {username}-{configuration-number}-mobile.ovpn.

You can also use the multi-file profile:

Keep the .ovpn, certificate, and key files together in one folder.
Rename the folder to ultra.tblk.
Confirm that macOS recognizes it as a Tunnelblick VPN Configuration.

Import the Configuration

Double-click the renamed .ovpn file or the ultra.tblk configuration.
Alternatively, drag the configuration onto the Tunnelblick icon.
Select Only Me when Tunnelblick asks who can use the configuration.
Approve any administrator or VPN prompts.

Start the Connection

Open the Tunnelblick menu.
Select Connect {profile name}.
Wait for Tunnelblick to confirm that the VPN is connected.

If Tunnelblick reports a deprecated configuration option, download a fresh OpenVPN configuration from the User Control Panel and import it again.

Confirm the Connection

Note your public IPv4 address before connecting.
Connect to the Tunnelblick profile.
Visit What Is My IP Address.
Confirm that the displayed IPv4 address has changed to the address used by your Ultra service.

Connect from Windows

This section explains how to connect from Windows using OpenVPN GUI.

Install OpenVPN GUI

Visit OpenVPN Community Downloads.
Download the correct Windows installer for your system.
Run the installer.
Complete the installation using the default components.

Prepare the Configuration

Extract the OpenVPN configuration .zip archive.
Locate the self-contained .conf file.
Rename it from {username}-{configuration-number}.conf to {username}-{configuration-number}-mobile.ovpn.

If Windows hides known file extensions, enable File name extensions in File Explorer before renaming the file. Confirm that the final filename does not end in .ovpn.conf.

Import the Profile

Launch OpenVPN GUI.
Find the OpenVPN GUI icon in the notification area.
Right-click the icon.
Select Import.
Select Import file.
Select the renamed .ovpn profile.
Confirm that the import succeeded.
OpenVPN GUI can also load profiles from the following directories:

C:\Program Files\OpenVPN\config
%USERPROFILE%\OpenVPN\config

Use the Import file option unless you specifically need to manage the configuration files manually.

Start the Connection

Right-click the OpenVPN GUI icon in the notification area.
Select the imported profile.
Click Connect.
Wait for the connection log to report that initialization is complete.
Confirm that the OpenVPN GUI icon indicates an active connection.

Confirm the Connection

Note your public IPv4 address before connecting.
Connect to the OpenVPN profile.
Visit What Is My IP Address.
Confirm that the displayed IPv4 address has changed to the address used by your Ultra service.

Troubleshoot OpenVPN

If OpenVPN does not connect:

Download a fresh configuration from the User Control Panel.
Confirm that each device uses a different one of the three available configurations.
Confirm that the imported profile is the self-contained .conf file renamed to .ovpn.
Confirm that the filename does not end in .ovpn.conf.
Disable IPv6 temporarily.
Restart the OpenVPN client.
Check the OpenVPN connection log for the exact error.
Confirm that another VPN, proxy, or privacy service is not interfering with the connection.

Reset the Windows TCP/IP Stack

Only reset the Windows TCP/IP stack if the OpenVPN log indicates a Windows networking problem, such as:

DHCP SERV =
DHCP LEASE OBTAINED =
DHCP LEASE EXPIRES =
DNS SERV =
Initialization Sequence Completed With Errors

Follow the official OpenVPN TCP/IP reset instructions.

Resetting the Windows TCP/IP stack affects the device’s network configuration. Do not perform this procedure unless the connection log indicates a Windows networking-stack problem.

If you require further assistance, you can open a support ticket here.