NOTE: This manual explains how to set up Always-On on your iPad or iPhone to get a permanent enforced VPN connection. To use this functionality, the device must be set to supervised mode. This process will reset the device to default settings. Before switching to supervised mode it is strongly recommended to make a backup of your iPad or iPhone.
Furthermore you will need a computer with macOS installed to run the Apple Configurator, which is necessary to switch the iPad/iPhone into supervised mode.
Always-ON VPN only works with iOS 8.0 or higher.
Tip: If you don’t want to set your device to supervised mode, you can also use On-Demand VPN which provides a similar functionality.
Before continuing, backup your device first in case anything goes wrong or you want to revert the changes later. To do so, connect your device to your macOS computer, go into iTunes and choose Back up Now under the Summary of the device you want to back up.
Also check Encrypt local backup if you want to also backup account passwords etc.
Download the Perfect Privacy certificate as archive. Now choose Certificates on the left, click Configure and import the file perfect-privacy_ipsec_ca.crt from the downloaded zip archive.
Go to the VPN section on the left and click Configure.
Use the information shown in the screenshot on the left. For Account/Password enter your Perfect Privacy user credentials. If you leave Local Identifier empty, you will receive a warning that the profile is incomplete. However, you can safely ignore this warning. Alternatively you can copy the content from Remote Identifier into the Local Identifier field.
Then save the profile (File menu > Save). Now you can close the settings window.