Download the "Apple Mobile Config" (
.mobileconfig) file for each user on the desired device, or download and send it to them over AirDrop or other secure means. Apple Configuration Profiles are all-in-one configuration files for iOS and macOS devices.
On macOS, double-clicking a profile to install it will fully configure the VPN.
Connect to the VPN by opening System Preferences, clicking on Network, finding the TunnelHero VPN in the left column, and clicking "Connect." Check "Show VPN status in menu bar" to easily connect and disconnect from the menu bar.
If you enabled "Connect On Demand" the VPN will connect automatically whenever it is able. Most Apple users will want "Connect On Demand", but while it is enabled then simply turning off the VPN will not cause it to stay disabled; it will just "Connect On Demand" again. To completely turn off the VPN you'll need to disable "Connect On Demand".
On macOS, you can turn off "Connect On Demand" by opening System Preferences, clicking on Network, finding the TunnelHero VPN in the left column, unchecking the box for "Connect on demand", and clicking Apply.
If you're behind a restrictive firewall or require the additional security of the WireGuard protocol, you'll need to first install the WireGuard app from the Mac App Store.
Once installed, you can add VPN profiles with a
.mobileconfig file much like you would for IPSec. To connect to these profiles, you'll have to start the WireGuard app, click its icon in the menu bar, and select the profile to connect to.
Managing WireGuard profiles can either be done through the WireGuard menu by clicking "Manage Tunnels", or through the Network preference pane.