1. Download and install OpenVPN Community package for your platform. Any version of OpenVPN will work, installation instructions are within the downloaded package, you just need to install openvpn binary, there is no need to configure it and/or generate keys. If you want to run VPN service on Mac, you may use free Tunnelblick or any other OpenVPN client for Mac.
2. Download "VPN package" for EU or US server (or both) from your personal backend or using the links found in your purchase confirmation mail. For US server you will download NNNN-us.zip and for EU server you will download NNNN-eu.zip archive (NOTE: "NNNN" is your diamondcard.us user Id, like 12345).
3. Un-zip downloaded file(s) in /etc/openvpn directory (Linux) or C:\Program Files\OpenVPN\config (Windows);
4. On Linux: Load tun0 device: to do this run "sudo modprobe tun" (requires "root" privileges). After that, change to /etc/openvpn directory and run "sudo openvpn eu.ovpn" if you are closer to our EU servers or "sudo openvpn us.ovpn" if you are closer to US server (both commands require root privileges). After OpenVPN connection is established (you will receive "Initialization Sequence Completed" message), launch your softphone and make a test call to #441. If test call was successful, start using your secure connection by making or receiving your calls. You may leave OpenVPN connection running for as long time as you need it - it does not interfere with other services or applications on your computer. To stop secure link just quit OpenVPN by pressing Ctrl-C in the window you run it - after that all you VoIP calls will go unsecure. To launch openvpn you may create a desktop icon accordingly with your window manager rules.
5. On Windows: Right click eu.ovpn if you are closer to our EU servers or us.ovpn (for US servers) file and select "Start OpenVPN on this config file", after OpenVPN connection is established (you will receive "Initialization Sequence Completed" message), run your softphone and make a test call to #441. If test call was successful, start using your secure connection by making or receiving your calls.You may leave OpenVPN connection running for as long time as you need it - it does not interfere with other services or applications on your computer.
To setup OpenVPN for Yealink hardphones, follow Yealink OpenVPN instructions. Please note, for the Yealink Wp52, the right path in the vpn.cnf file is /config/openvpn/keys/. Here is the example of vpn.cnf:
client port 1194 dev tun tun-mtu 1500 remote SERVER 1194 ns-cert-type server ca /config/openvpn/keys/CC-ca.crt cert /config/openvpn/keys/NNNN-CC.crt key /config/openvpn/keys/NNNN-CC.key comp-lzo
NOTE: "NNNN" is your diamondcard.us user Id, like 12345, "CC" is location code: "eu" or "us", "SERVER" is our OpenVPN server closest to you location: star.dreamtime.net if you are in the US and diamondcard.us if you are in EU or Asia. You will find all .crt and .key files in OpenVPN setup pack you will download when you signup to OpenVPN service.
When connected to the VPN the Yealink WP52 DECT handset screen displays a small VPN icon on the top.
Thanks Mr.Julien Fiches for Yealink OpenVPN hints!
1. Make sure your device supports OpenVPN protocol;
2. Un-zip downloaded file(s) in a separate directory, upload *.key and *.crt files to your device;
3. If you are closer to our EU servers, configure your device to connect to diamondcard.us server, port 1194, UDP protocol, private key NNNN-eu.key, certificate NNNN-eu.crt and certificate authority eu-ca.crt files ("NNNN" is your diamondcard.us user Id, like 12345). Please follow your device OpenVPN instructions for details;
4. If you are closer to our US servers, configure your device to connect to star.dreamtime.net server, port 1194, UDP protocol, private key NNNN-us.key, certificate NNNN-us.crt and certificate authority us-ca.crt files ("NNNN" is your diamondcard.us user Id, like 12345). Please follow your device OpenVPN instructions for details;