Connect iOS with WireGuard
Enroll a Dunivra profile, import it into the official iOS client and verify your connection.
Enroll this device first
Sign in to an active workspace, open Devices and add a profile with the correct platform and a recognizable label. Your browser creates the private key locally and sends only the public key. Wait for confirmed gateway provisioning before downloading the configuration. The secret configuration is available only during this enrollment; keep it private and do not email it or paste it into support.
Install and import on iOS
Install the official WireGuard app from the App Store. If you enrolled using a separate trusted screen, scan the QR code displayed by Dunivra inside WireGuard; otherwise import the .conf file on your iPhone or iPad. The QR code contains the private configuration, so keep it off shared screens and screenshots. Accept the expected iOS VPN permission and enable the tunnel in WireGuard.
Verify the connection
Enable the imported tunnel in the WireGuard client, then check the recent handshake, DNS diagnostic and applied policy revision in Dunivra. Test a domain covered by one of your rules and allow for DNS caches. A profile appearing in the dashboard does not prove a working tunnel. The browser cannot activate the system VPN. Physical-device import and routing still need verification on your own device.
Disconnect, replace or troubleshoot
Disable the tunnel in the client to disconnect. Controls apply only while traffic uses the configured VPN and DNS path. If a configuration is lost or shared, revoke that profile in Dunivra and enroll a replacement; the server cannot recover its private key. For help, report the platform, profile label and time of failure using Support, without the configuration, QR code or private key.