Skip to main content

OpenConnect for Linux

Initial Setup - Step 1

Make sure that your computer is connected to the Internet (or the WLAN with the identification "Uni-Bremen") so that the required software can be installed if necessary. Also make sure that the "universe" repository is activated (see instructions at, for example).

Install the package "network-manager-openconnect-gnome" in the Ubuntu Software Center (or via another package installer) Restart your computer afterwards. If you don't see an option "VPN connection compatible to Cisco AnyConnect (openconnect)" in the selection at step 4 you have to install the package "network-manager-openconnect" also.

Note General

Some restricted services of the University or the State and University Library can only be used when you are on campus, so that the computer you use has an address from the area assigned to the University.

To access these services from home or on the road, you must install a so-called VPN client software (AnyConnect or OpenConnect) on your computer once and establish a connection to the campus with the VPN client before each access to the restricted services. This means that you are "virtually" on campus and can use the services you are used to.

Please note the different types of tunnels and make sure you choose the correct tunnel.

Note: To access the resources of the State and University Library (SuUB) you have to select the tunnel 'Tunnel-all-Traffic'.

Initial Setup - Step 2

Click with the left mouse button on the NetworkManager applet in the panel and select "Configure VPN connections..." under VPN connections.

Initial Setup - Step 3

In the dialog that opens, click on "Add".

Initial Setup - Step 4

Select "VPN connection compatible to Cisco AnyConnect (openconnect)" as connection type and click on "Create...".

Initial Setup - Step 5

You can freely choose the connection name. Enter "" as gateway. Select the file "/etc/ssl/certs/T-TeleSec_Global_Root_Class_2.pem" as the CA certificate.

Initial Setup - Step 6

Under "IPv4 Settings" in the Method tab, activate the setting "VPN, Addresses only" so that only web addresses are routed through the VPN tunnel.

If not all Internet traffic is to be routed through the tunnel (i.e. the tunnel "Tunnel-Uni-Bremen" is to be used, see tunnel types), tick "Use this connection only for resources of this network" under "IPv4 settings" after clicking on "Routes...".

Please note that for access to most media of the "Staats- und Universitätsbibliothek Bremen" all traffic must be routed via the university network. The check mark should therefore be deactivated for this purpose.

Then close all the settings windows you have opened, regardless of whether you have just made the tunnel type setting or not.

Connect - Step 1

Click on the NetworkManager applet again and under "VPN Connections" select the connection you have just set up.

Connect - Step 2

In the opened dialog, check the box "Automatically start connecting next time" and click on the Connect button in the upper right corner.

Connect - Step 3

Enter the access data of your university account under Username and Password and click on Login.

A small lock in the corner of the NetworkManager applet indicates the successful connection.


I can't download the installation file and get the message "Forbidden" instead.


  • Not all university users can access the VPN service. In particular, alumni are excluded from use.
  • If you are a regular member of the university (e. g. a regular student or employee) or SuUB staff member, please contact the Account Manager to have your account assignments checked.

During installation, the error message "The vpn client agent was unable to create the interprocess communication depot." appears

  • This error message is triggered by an activated Internet connection sharing. Deactivate the network adapter's share in the adapter settings and try the installation again.

I have successfully established a VPN connection, but can't use the library services?

  • If you want to use services that are enabled for the network area of the University of Bremen but are not "hosted" in the network area of the university (publishers are an example here), then you have to change the group from "Tunnel-Uni-Bremen" to "Tunnel-all-Traffic" when setting up a connection. For a detailed explanation please read the page VPN-Tunnelarten.
  • ATTENTION: With this option, all traffic is now routed through the tunnel. Please leave the tunnel activated with this option only as long as it is needed for working.