Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I know what a VPN is, and I've done a little reading about how to set up VPN on demand. However, I'm confused.

Is VPN on demand essentially a certificate instead of a password prompt on each connect? Do apps need to take care of this specifically, or does iOS handle it whenever it sees that an app wants VPN on demand? What is VPN on demand?

share|improve this question
up vote 5 down vote accepted

Yes, it does involve authentication by certificate. From this article from Apple:

iOS supports VPN On Demand for networks that use certificated-based authentication. You specify which domains require a VPN connection by using a configuration profile.

The VPN connection is made whenever the device tries to connect to certain domains. Specific apps don't need to do anything; as soon as they try to access such a server the VPN connection is initiated.

Visit this support page for information about how to use the Configuration Utility to create a configuration profile that sets up VPN On Demand.

share|improve this answer
In general, though, this feature need not be tied to certificate-based authentication schemes. Your company might serve crazycoolcats.corp and it may be really important that employees using iOS devices be able to reach that service. You can use on-demand vpn to configure iOS to use your local DNS servers when resolving *.corp domains. – dcow Sep 28 '15 at 22:07

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.