Support schedule

Monday to Friday 08:00 AM to 05:00 PM. (MET)
Our current response time is *48h but we usually manage to get a faster response.
*esclated tickets might require more time

 Most Popular
Help & FAQ: Linux Installation
Configure OpenVPN for Linux Mint (with network manager)
Posted by Uli Brügmann on 25 February 2013 11:53 AM

On a Linux Mint platform, CyberGhost VPN can be used with a native OpenVPN installation, if the following requirements are met:

Step 1

Visit your CyberGhost VPN online account.

Log in ...

Log-in with your user data and click in the upper menu on the entry 'My Devices'. 

Click on 'My Devices'

Specify the device type, in this case it's 'Other devices'.

Click on 'Other Devices'

Specify the wanted OpenVPN protocol and make sure you have chosen 'Linux' as the 'Operating System' in the drop down list right below the protocol list.

  • OpenVPN (UDP): UDP allows higher speeds with VPN connections, but can lead to broken downloads in certain cases.
  • OpenVPN (TCP): TCP allows more stable connections, but is a bit slower than UDP. Choose this option, if UDP produces connection losses.

Choose OpenVPN protocol type and operating system 

Since native protocol connections may only be used with exactly one server you now have to choose the country you want to surf from (the server to be used in this country will be chosen by CyberGhost automatically). 

Specify location

Depending on the country chosen, your current plan and the availability of different server groups for a certain location you might additionally want to specify a server group available for your manual VPN connection:

  • Default Server: Includes the group of all Special Edition, Premium and Premium Plus subscription servers (no free servers) for the chosen country. The servers are available for all Special Edition, Premium and Premium Plus subscribers.
  • Premium Server: Includes the group of all Premium and Premium Plus subscription servers for the chosen country. The servers are available for Premium and Premium Plus subscribers only (but not for Special Edition subscribers).
  • NoSpy: Includes the group of all NoSpyProxy servers for the chosen country. The servers are only available for Premium Plus subscribers, who have the NoSpyProxies as an additional feature. Those servers are not available for Special Edition, Premium and regular Premium Plus subscribers.
Please note: The availability of a server group is hard coded to a) the chosen country and b) your current plan. Not every country and also not each plan does include each and every server group available. Some locations don't have any server groups available, others just 'Default Servers' or just 'Premium Servers' and some have them all. Also does Special Editions only include 'Default Servers', but no 'Premium Servers', and 'NoSpyProxies' are just included in some rare plans.

Chose server group

Once done, please download the configuration file. For that please click on 'Download Configuration' and save the file on your computer. It's a ZIP file, which contains the following single configuration files:

  • ca.crt: This is the certificate of the certification authority
  • client.crt: This is the user certification file 
  • client.key: This is your private key file
  • openvpn.ovpn: This is your OpenVPN configuration file

Konfigurationsdatei herunterladen

Step 2

Install OpenVPN and the network manager on Linux Mint.

For that click on 'Menu > All Programs > Program management' and type in the search field (in the upper right corner) 'openVPN'. Install the following programs with a double click:

  • openvpn
  • network-manager-openvpn
  • network-manager-openvpn gnome

Alternatively or to make sure that already installed components are up to date, open a terminal and enter the following commands:

sudo apt-get install openvpn
sudo apt-get install openvpn bridge-utils
sudo apt-get install network-manager-openvpn network-manager-openvpn-gnome

Log out and in again or restart your computer or open a terminal and type in the following command:

sudo restart network-manager 

Step 3

Open your personal folder in your file manager and create a new folder called 'CyberGhost'. Extract the content of the downloaded configuration ZIP file and copy all single files into the new folder.

If you want to surf from different countries, rename the unzipped OpenVPN configuration file from 'openvpn.ovpn' to e.g. 'CG_RO_NoSpy.ovpn' (or whatever location/server group combination you have chosen while setting up the configuration file in your account management). Choose then a different location and a different server group (if available) and download the next zipped configuration file. Unzip it, rename the containing 'OpenVPN.ovpn' as well und copy it also inside the new folder. The also downloaded remaining certificate and key files in the ZIP do not need to be copied again, for you already have them from the first download.

For two different countries you need for example do the following steps:

  1. Specify device, protocol and operating system
  2. Choose a country, e.g. USA
  3. Download the zipped configuration file with certificates, key and OpenVPN configuration file
  4. Unzip the downloaded file and copy all files into the new 'CyberGhost' folder
  5. Rename the OpenVPN configuration file from ‘openvpn.ovpn’ to ‘CG_USA.ovpn’.
  6. Choose the next country, e.g. Romania
  7. Download the next zipped configuration file
  8. Unzip the downloaded file and copy just the file 'openvpn.ovpn' into the 'CyberGhost' folder
  9. Rename it to ‘CG_RO.ovpn’.
  10. etc. ...

The subfolder 'config' now consists of the following files (regarding the example above):

  • ca.crt
  • client.crt
  • client.key
  • CG_USA.ovpn
  • CG_RO.ovpn
  • xxx.ovpn

Click in the lower right corner on the network icon and start the network manager via 'Network Connections'. Click on 'Add'.

Choose 'Import saved VPN configuration' ...

... and click on 'Create'.

Open your 'CyberGhost' folder, mark (one of) your OpenVPN configuration file (e. g. 'CD_DE.ovpn') and click on 'Open'.

Focus on the tab 'VPN' and take care of the following options:

In the next window type in a 'Connection Name', enter the server address you noted before, e.g. ''*, in the field 'Gateway' and take care of the section 'Authentication'.

  • Connection name: Type in a name for this connection, ideally composed out of the country to surf from and maybe the server group to be used, e. g. 'CyberGhost RO NoSpy'
  • Gateway: The server address is already filled in by the loaded configuration file
  • Type: Choose 'Password with certificates (TLS)'
  • User name: Your regular CyberGhost user name.
  • Password: Your regular CyberGhost password.
  • User certificate: Enter here the path to the user certification file ('client.crt')
  • CA certificate: Enter here the path to the CA certification file ('ca.crt')
  • Private Key: Enter here the path to the key file ('client.key')

Click on 'Save' and enter the password of your key ring (only necessary, if it hasn't been unlocked when logging in).

Step 3 alternatively (manual configuration)

Like above, click on 'Add', but this time don't import a configuration file. Instead click on 'OpenVPN'.

Click on 'Create' and adjust under the tab 'VPN' the following settings:

  • Connection name: Type in a name for this connection, ideally composed out of the country to surf from and maybe the server group to be used, e. g. 'CyberGhost RO NoSpy'
  • Gateway: The server address is already filled in by the loaded configuration file
  • Type: Choose 'Password with certificates (TLS)'
  • User name: Your regular CyberGhost user name.
  • Password: Your regular CyberGhost password.
  • User certificate: Enter here the path to the user certification file ('client.crt')
  • CA certificate: Enter here the path to the CA certification file ('ca.crt')
  • Private Key: Enter here the path to the key file ('client.key')


Now click on 'Advanced' on the right bottom of the window and check all of these options (and uncheck the rest), resp. change settings:

  • Tab 'General':
    • Use custom gateway port: 9081 (for TCP connections: 80)
    • Use custom renegotiation interval: Deactivated (also for TCP connections)
    • Use LZO data compression: Activated (also for TCP connections)
    • Use a TCP connection: Only activated, if you have chosen an OpenVPN TCP connection while configuring your native VPN in your account management.
    • Use a TAP device: Activated (if no data connections can be established, please deactivate; for TCP also deactivate)
    • Use custome tunnel MTU: 1500 (for TCP please deactivate)
    • Use custom UDP fragment size: 1300 (for TCP please deactivate)
    • Restrict tunnel TCP Maximum Segment Size (MSS): Deactivated (also for TCP)
    • Randomize remote hosts: Deactivated (also for TCP)
  • Tab 'Security'
    • Cipher: AES-256-CBC (also for TCP)
    • HMAC Authentification: MD-5 (also for TCP)

Click on 'OK' and 'Save' and enter the password of your key ring (only necessary, if it hasn't been unlocked when logging in).

Step 4

Back in the network manager you now should have an entry with your new OpenVPN connection.

Verbindung starten

Choose the entry via your menu, wait a moment ...


... and you're in:


Possible Failure: On some systems one can establish successfully a VPN connection, but nonetheless no pages can be loaded. If that's the case with your configuration, please deactivate the TAP device:
  • Click on the network icon in your system tray
  • Click on 'Network Connections'
  • Mark the VPN entry to be changed and click on 'Edit'
  • Click down below on 'Advanced'
  • Deactivate 'Use a TAP device'
  • Click on 'OK' and 'Save' 



*Details about correct server addresses for the manual configuration of native protocols (such as structure, single server configuration, and address variations) you will find in this article.


Note: As we all know there are seldom two Linux distribution built the same way; therefore the Linux Mint 17.1 instructions might be of no help for you. If that's the case, please consult the help documentation of your distribution. Furthermore the following links might also help you out:



(142 vote(s))
This article was helpful
This article was not helpful

© CyberGhost VPN