This article explains how to enroll a Windows, Linux, macOS, iPhone or iPad device in for Secure Access VPN after receiving a device invitation.

Secure Access uses NetBird to provide access only to the networks and services approved for your organisation. Normal internet traffic usually continues to use your device's ordinary internet connection.

Before you begin

You will need:

• A device invitation email from Secure Access Portal (secureaccess@vmnetwork.com.au).

• Access to the device you are registering.

• Permission to install software on the device.

• A current web browser.

Windows, macOS and Linux installation may require an administrator password or approval.

The invitation email identifies the administrator or VPN manager who sent it, their organisation and the VPN organisation you are joining.

The invitation normally remains valid for 72 hours and authorises one device.

Do not forward your invitation.

The invitation link authorises the enrolment of one device attached to your email address.  Secure Access will never ask you to email or send someone your password, authenticator code, private key, setup key or enrolment code.

Open your device invitation

Complete these steps on the device you intend to register whenever possible:

1. Open the email with the subject Your remote-access device invitation.

2. Confirm that you recognise the named sender, their organisation and the VPN organisation.

3. Select Register my device.

4. If the button does not work, use the complete https://secureaccess.vmnetwork.com.au/... address printed underneath it.

5. Enter a useful device description, such as Johns Work Laptop or Reception iPad.

6. Enter the computer name if you know it. This field is optional.

7. Select the correct device operating system from the dropdown list.

8. Submit the device details.

9. Leave the page open while Secure Access prepares registration.

The page checks progress automatically. When the device is ready, it displays the setup process for the operating system you selected.

NOTE: VPN managers and administrators: If you are already signed in to the management portal, sign out before opening your own device invitation. Alternatively, open the invitation in a separate private browser window. This prevents the management session from being confused with the invited VPN user.

Windows

Windows users should normally use the graphical Secure Access Setup application.

Install Secure Access Setup

1. Once enrollment is submitted, you will land on the approved setup page, select Download Secure Access Setup.

2. Find SecureAccessSetup.exe in your Windows Downloads folder.

3. Run the application.

4. Approve the expected Windows administrator prompt.

5. Wait for the Installation complete message.

6. Return to your browser.

7. Select Register this computer.

8. If your browser asks whether it may open Secure Access Setup, approve the prompt.

9. Secure Access Setup will open the invitation, install or reuse the approved NetBird VPN client, create an organisation-specific profile and verify the connection automatically.

10. Wait for Secure access is ready in the application and Device registration complete in your browser.

Secure Access Setup is installed for the current Windows user and is available from the Start menu as Secure Access Setup.  This application can be used to monitor your VPN connectivity.

The NetBird VPN client continues running in the background and normally reconnects after the computer restarts. Its notification-area icon may be inside the Windows hidden-icons menu.

If Secure Access Setup is already installed, you can normally proceed directly to Register this computer.

Opening Secure Access Setup from the Start menu without an active invitation displays status and diagnostic information. It does not enrol a new device by itself, you must obtain an enrollment code through the email invitation process.

Technician-assisted Windows PowerShell installation

Use this alternative only when an authorised technician is assisting you or the normal browser-to-application process cannot be used.

1. Expand Advanced technician-assisted PowerShell installation on the approved setup page.

2. Download SecureAccess-Windows-Install.ps1.

3. Open Windows PowerShell in the Windows account that will use Secure Access.

4. Do not run it as SYSTEM or from another administrator's desktop.

5. Run:

powershell.exe -NoProfile -ExecutionPolicy Bypass -File "$HOME\Downloads\SecureAccess-Windows-Install.ps1"

1. Wait until PowerShell asks for the enrolment code.

2. In the Secure Access Portal, select Generate PowerShell enrollment code.

3. Copy the fresh one-time code into the waiting PowerShell window.

4. Allow the script and Secure Access Setup to finish.

5. Close Secure Access Setup after it reports success so PowerShell can print the final NetBird status and useful commands.

The script downloads the approved application from the Secure Access Portal, verifies its SHA-256 hash, deletes its temporary download and prints NetBird connection information after registration.

Linux

The assisted Linux installer supports current Debian/Ubuntu and RPM-family distributions on AMD64 or ARM64.

curl is required. The installer adds other required packages when necessary.

1. On the approved setup page, select Download Linux installer.

2. Open a terminal.

3. Run:

sudo bash "$HOME/Downloads/SecureAccess-Linux-Install.sh"

1. Enter the computer administrator password when prompted.

2. Wait at the Enrollment code: prompt.

3. In the Secure Access Portal, select Generate one-time enrollment code.

4. Paste the code into the terminal and press Enter.

5. Wait for Secure Access registration is complete and the NetBird status output.

Useful Linux commands:

sudo netbird status
sudo netbird status -d
sudo netbird profile list

The installer also prints commands containing the exact profile name for disconnecting and reconnecting that profile.

NetBird normally reconnects after a restart.

macOS

The current macOS workflow is should be completed with an authorised technician.

It supports macOS 12 or later on Apple Silicon and Intel Macs.

1. On the approved setup page, select Download macOS installer.

2. Open Terminal.

3. Run:

sudo /bin/bash "$HOME/Downloads/SecureAccess-macOS-Install.sh"

1. Enter the Mac administrator password when prompted.

2. Wait at the Enrollment code: prompt.

3. In the Secure Access Portal, select Generate one-time enrollment code.

4. Paste the code into Terminal and press Return.

5. Approve any expected macOS VPN configuration or NetBird system prompt.

6. Wait for Secure Access registration is complete and the NetBird status output.

The installer verifies both the downloaded package hash and package signature.

Open NetBird from Applications or its menu-bar icon to view the connection.

iPhone or iPad

NetBird's labels can vary between iOS releases. Keep the Secure Access page available during setup.

1. Select Set up this iPhone or iPad from the approved invitation.

2. Install the official NetBird application from Apple's App Store. The portal provides an App Store link and QR code.

3. Return to the portal.

4. Select Prepare iPhone setup.

5. Scan the displayed transfer QR code with the iPhone or iPad.

6. If the invitation is already open on that device, use Continue setup on this device instead.

7. On the transferred setup page, copy the management server address when NetBird asks for a custom server.

8. Copy the displayed one-use setup key into the official NetBird app.

9. Connect NetBird.

10. Approve the iOS VPN permission.

11. Return to the setup page.

12. Select I entered the key and NetBird is connected.

13. Wait for Device registration complete.

The mobile transfer lasts 10 minutes and works once.

The setup key is displayed only on the transferred mobile page and must not be shared.

Confirm that Secure Access is working

Windows

1. Open Secure Access Setup from the Start menu.

2. Open the Status tab.

3. Confirm that it reports a connected Secure Access profile.

If your computer contains more than one Secure Access profile, only one NetBird profile can be active at a time.

Select the profile for the required organisation and use Connect selected profile.

Switching profiles can interrupt existing remote connections.

The Connectivity test tab performs bounded connection checks.

The Diagnostics tab can copy sanitised diagnostics or create a support ZIP without including invitation codes, setup keys, WireGuard keys or packet captures.

Linux or macOS

Run:

sudo netbird status
sudo netbird profile list

iPhone or iPad

Open NetBird and confirm that the approved profile reports connected.

Your device should also show an active VPN indicator.

Invitation and setup time limits

Creating a fresh ten-minute launch does not require another email while the original invitation remains active.

Troubleshooting

The invitation is unavailable

The invitation may be:

• Invalid.

• Expired.

• Revoked.

• Already completed.

• Copied incorrectly.

Ask your VPN manager to check your VPN user record.

Do not send the old invitation link through a support ticket, email or chat.

A management portal session is already open

If you are also an administrator or VPN manager, sign out of the management portal and reopen your invitation.

Alternatively, open the invitation in a separate private browser window that is not signed in to the management portal.

The operating system is wrong

Correct the suggested operating system before submitting the device.

If you have already submitted the device, stop and contact your VPN manager or support provider.

Do not use installation instructions intended for another operating system.

Secure Access Setup did not open from the browser

Confirm that Secure Access Setup was installed from the expected Secure Access Portal.

Return to your invitation and create a fresh application launch.

If necessary:

1. Open Secure Access Setup from the Windows Start menu.

2. Select Enter a launch code manually.

3. Paste the fresh code displayed by the portal.

Do not reuse a failed or consumed launch code.

Windows blocks or warns about the installer

Do not bypass an unexpected browser, antivirus or Windows security warning.

Confirm that the download came from:

secureaccess.vmnetwork.com.au

If you are unsure, stop and contact your authorised support provider.

NetBird is connected but the browser has not completed

Leave NetBird connected and allow the browser a few minutes to refresh.

Use Check registration status if it appears.

If NetBird was already connected but setup stopped early:

1. Return to your invitation.

2. Expand NetBird connected but setup did not finish?

3. Select Check existing registration.

Secure Access is using the wrong profile

Windows

Open Secure Access Setup, select the organisation-specific profile on the Status tab and choose Connect selected profile.

Linux or macOS

Run:

netbird profile list

Use the profile-aware commands printed by the Secure Access installer.

You do not have permission to install software

Stop and contact your organisation's IT support or VPN manager.

Do not register the device from another person's administrator desktop. The Secure Access application and profile must belong to the intended device user.

Security reminders

• Use only the invitation sent to your own email address.

• Confirm the portal hostname is secureaccess.vmnetwork.com.au before entering device details or using a launch code.

• Never forward your invitation.

• Never copy the complete invitation link into a support ticket, email or chat.

• Enter one-time enrolment codes only into the approved Secure Access installer or application.

• Never disclose your password or authenticator code.

• Never disclose a private key, setup key or WireGuard key.

• If the invitation was unexpected, do not use it. Contact your known VPN manager or support provider using contact details you already trust.