EPSS Department VPN (WireGuard) — User Setup Guide
This guide walks EPSS department members through connecting to the EPSS Department VPN using WireGuard.
What you need
- Your EPSS username and EPSS/AD password
- A device (Windows, macOS, iPhone, or Android)
- Internet connection
Step 1 — Go to the EPSS VPN Portal
- Open a web browser and go to: https://v.epss.ucla.edu
- Log in using:
- Username: your EPSS username
- Password: your EPSS/AD password
Step 2 — Create a New VPN Configuration
- On the portal page, locate New Configuration.
- For Profile / Type, choose: WireGuard.
- In the Name field, enter a label for your device, for example:
LaptopOffice-PCiPhoneAndroid
- Click Create / Download to generate your configuration.
Tip: Create a separate profile for each device (e.g., one for your laptop and one for your phone).
Step 3 — Install WireGuard (Choose your device)
A) Windows (Recommended)
- Download WireGuard from: https://www.wireguard.com/install/
- Install WireGuard like a normal program.
Import your VPN profile (Windows)
- Open WireGuard.
- Click Add Tunnel.
- Select Import tunnel(s) from file.
- Choose the downloaded
.conffile. - Click Activate.
Connected? You should see the tunnel marked as Active and traffic counters increasing.
B) macOS
Install WireGuard
- Download WireGuard from:
https://www.wireguard.com/install/ - Open the downloaded
.dmgfile. - Drag WireGuard into the Applications folder.
- Open WireGuard from Applications.
Note: If WireGuard does not open, check System Settings → Privacy & Security and click Allow if prompted.
Method 1 — Import from File (.conf)
- Download the configuration file (
.conf) from the EPSS VPN portal. - Open WireGuard.
- Click Import Tunnel(s) from File.
- Select the downloaded file.
- Toggle the tunnel ON.
Method 2 — Add Configuration by Copy/Paste (Manual)
- On the EPSS VPN portal, create a WireGuard configuration.
- Click View or open the configuration details.
- Copy the full configuration text (it starts with
[Interface]and includes[Peer]). - Open WireGuard on your Mac.
- Click Add Empty Tunnel.
- Delete any existing text in the editor.
- Paste the configuration you copied.
- Give the tunnel a name (e.g.,
EPSS VPN). - Click Save.
- Toggle the tunnel ON.
Connected? The tunnel should show Active and traffic should begin.
If WireGuard does not open on macOS
- This may be due to macOS security or managed device restrictions.
- If the app does not open or crashes, use the alternative below.
Alternative (Recommended if WireGuard fails)
- Download Tunnelblick:
https://tunnelblick.net - From the EPSS portal, create a configuration using:
- OpenVPN (Prefer UDP)
- Download the file and double-click it to import.
- Click Connect.
C) iPhone / Android (Using QR Code)
- Install WireGuard from the App Store / Google Play.
- On the EPSS VPN portal, generate a WireGuard configuration and display the QR code.
- Open the WireGuard app and tap Add a tunnel.
- Select Create from QR code.
- Scan the QR code.
- Toggle the tunnel ON.
Step 4 — Verify It Works
- Keep WireGuard ON.
- Open the internal EPSS resource you were provided (example: internal apps/admin pages).
If it loads while VPN is ON, you are done ✅
Common Issues & Fixes
“It connects but nothing works”
- Disconnect and reconnect WireGuard.
- Confirm you imported the correct profile for the correct device.
- If you recently changed your EPSS password, generate and download a new profile.
“I don’t see a download / it gave me OpenVPN instead”
- Go back and make sure you selected WireGuard (not OpenVPN).
“I can’t log into the portal”
- Verify your EPSS username/password works for other EPSS services.
- If your password recently changed, try again or contact EPSS IT for help.
Need Help?
If you need help, please contact EPSS IT and include:
- Your device type (Windows/macOS/iPhone/Android)
- A screenshot of the error (if any)