eduroam - First Time Setup

This document explains the process for connecting with eduroam on different types of devices by first establishing a network profile.

eduroam Configuration Assistant Tool (CAT)

It is strongly recommended to use eduroam's Configuration Assistant Tool (CAT) and follow the instructions on the eduroam website before attempting to do it manually.

Click the link below to the eduroam Configuration Assistant Tool (CAT) from the device you'd like to connect.

The tool automatically detects your device's operating system (OS), and provides the installer that matches. You will also have the option to choose another installer to download for other operating systems.

How do I log in to eduroam?

UW-Madison users must use their fully-scoped NetID, or essentially the NetID email address. The domain, '@wisc.edu,' must be added to the username, or the connection will fail.

Username: NetID@wisc.edu

Password: NetID password


Windows Computers

  1. Download UW-Madison eduroam Installer for Windows 7/8/10. (Note: This will *not* work for XP/Vista)
  2. Open/Run the installer. You may receive a User Account Control prompt. Click on Yes:
  3. A blank command prompt will show and state
    Profile eduroam is added on interface. . .
    Press any key to continue...
    Press any key on the keyboard to continue
  4. The profile is installed. To connect, open your System Network, choose eduroam, and click "Connect". When prompted for Credentials, enter a fully qualified NetID followed by @wisc.edu (ex. bbadger@wisc.edu) and password. Note: you must have the @wisc.edu after your NetID.

If you ran the installer above you do not need to complete the Step by Step Instructions below.

  1. Click the Network icon in the Windows taskbar:
  2. Select Open Network and Sharing Center
  3. Click on Manage Wireless Networks:
  4. Click on Add:
  5. Click on Manually create a network profile:
  6. Type in eduroam for Network Name:
    -Select WPA2-Enterprise for Security type:
    -Select AES for Encryption Type:
    -Uncheck Start this connection sutomatically.
  7. Click Next.
  8. Click Change connection settings:
  9. Click the Security tab
  10. Select Microsoft Protected EAP (PEAP) for Choose a network authentication method:
  11. Click on Settings
  12. Check the box labeled Connect to these servers: and enter login.wisc.edu (1)
    -Check the box AddTrust External CA Root from the list Trusted Root Certificaiton Authorities (2)
    -Check the box Do not prompt user to authorize new servers or trusted certificaiton authorities (3)
    -Under Select Authentication Method:, select Secured Password (EAP/MSCHAPv2)
  13. Click Configure(4)
  14. Uncheck Automatically use my windows logon name and password (and domain if any).
  15. Click OK to close the EAP MSCHAPv2 Properties
  16. If using a 32-bit OS then check the box for COMODO Certification Authority
    Not sure if your OS is 32 bit? Check Windows (Vista, 7, 8, &10) - Determining 32-bit or 64-bit Versions
  17. Click OK to close the Protected EAP Properties dialog box to return to the eduroam Wireless Network Properties dialog:
  18. Click Advanced settings
  19. Check the box Specify authentication mode:
    -Select User authentication from the drop down list.
  20. Click OK to close the Advanced settings dialog box:
  21. Click OK to close the eduroam Wireless Network Properties dialog box:
  22. Click Close to close the Manually connect to a wireless network dialog box:
  23. Close the 'Manage Wireless Networks' window:

If you ran the installer above you do not need to complete the Step by Step Instructions below

  1. Right click the Network icon in the Windows taskbar:
  2. In the Network and Sharing centre, select Setup a New Connection or Network
  3. Select Manually connect to a wireless network
  4. Type in eduroam for Network Name:
    -Select WPA2-Enterprise for Security type:
    -Select AES for Encryption Type:
    -Check Start this connection sutomatically.
  5. Click Next.
  6. Click Change connection settings
  7. Click the Security tab
  8. Select Microsoft Protected EAP (PEAP) for Choose a network authentication method:
  9. Click on Settings
  10. Check the box labeled Connect to these servers: and enter login.wisc.edu (1)
    -Check the box AddTrust External CA Root from the list Trusted Root Certificaiton Authorities (2)
    -Check the box Do not prompt user to authorize new servers or trusted certificaiton authorities (3)
    -Under Select Authentication Method:, select Secured Password (EAP/MSCHAPv2)
  11. Click Configure(4)
  12. Uncheck Automatically use my windows logon name and password (and domain if any).
  13. Click OK to close the EAP MSCHAPv2 Properties
  14. If using a 32-bit OS then check the box for COMODO Certification Authority
    Not sure if your OS is 32 bit? Check Windows (Vista, 7, 8, &10) - Determining 32-bit or 64-bit Versions
  15. Click OK to close the Protected EAP Properties dialog box to return to the eduroam Wireless Network Properties dialog:
  16. Click Advanced settings
  17. Check the box Specify authentication mode:
    -Select User authentication from the drop down list.
  18. Click OK to close the Advanced settings dialog box:
  19. Click OK to close the eduroam Wireless Network Properties dialog box:
  20. Click the Network icon in the Windows taskbar:
  21. Click eduroam and then click Connect
  22. Click Connect when it prompts you about the server's identity
  23. When prompted for credentials, enter fully qualified NetID (bbadger@wisc.edu) and password. Note: you must have the @wisc.edu after your NetID.

Mac Computers

  1. Download UW-Madison eduroam Profile Installer .
    (Safari Users: Right-Click, Download Linked File As...)
    • If you have the iPhone Configuration Utility installed the profile will notopen with System Preferences by Default!
      • In order to force the profile to open with System Preferences, Control-Click (or Right-Mouse Click) the profile, Select Open With... System Preferences.
      • Eduroam Profile in downloads System Preferences
  2. Click Show Profile to view and verify. Even if the profile shows Unsigned instead of Verified, it is fine to proceed with the installation.

  3. lion-01.png
  4. Click Continue.

  5. lion-02.png
  6. Enter your fully-qualified NetID@wisc.edu and NetID Password

  7. lion-03.png
  8. Finally, you may be prompted for local machine credentials to install the profile.

  9. lion-04.png
  10. In order for your computer to default to eduroam you may need to move it to top of your list or remove UWNet
    -Open the System Preferences window.
    -In the Internet & Wireless section, click Network.
    -In the Network window's left-hand column, select Wi-Fi.
    -Click the Advanced... button in the lower right area of the window.
    -In the list of preferred networks, highlight UWNet and click the minus button or move eduroam.
    -After removing UWNet from the list or moving eduroam, click OK and close any open windows. Answer OK/Yes if asked.

iOS Devices (iPhone/iPad)

  1. From the iOS device, download UW-Madison eduroam iOS Profile.
  2. eduroamProfileDownloadiPhone.png
  3. Tap Allow to download the network profile to the device. Once successful, a message saying the profile has been downloaded should appear:
  4. eduroamiPhoneProfileDownloaded.png
  5. Open the settings app on the device, and navigate to the new Profile Downloaded at the top:
  6. iPhoneSettings.PNG
  7. On the Install Profile page, tap the Install option in the top right.
  8. iPhoneInstallProfile.png
  9. Tap the Install that appears on the bottom to install the profile. Note: If there is a passcode set on the device, it will be prompted:
  10. iPhoneEnterPasscode.png
  11. Once the profile is installed, go the to Wi-Fi settings and select eduroam from the list of networks that appear. It will prompt for a username first, which should be the NetID email (NetID@wisc.edu) for the user. After tapping Next, a similar screen will appear to type in the password for that NetID.
  12. iPhoneEduroamUsername.png
  13. The eduroam network will appear under the Wi-Fi at the top. The device is now connected:
  14. eduroamConnectediPhone.png

Android Phones/Tablets

  1. In the General Settings, Make sure WiFi is turned on.

  2. If you have not already done so, download the Eduroam security certificate on your phone from https://support.comodo.com/index.php?/comodo/Knowledgebase/Article/View/853/74/addtrustexternalcaroot

    Comodo Support Download Page
  3. Install the downloaded certificate by pressing the download button. The file will likely install automatically, and may prompt you to verify your identity. If it does not install automatically, locate it in your files and open it.

  4. Pressing the download button
  5. Give the certificate a name, and make sure Wi-Fi is selected under the "Used for" category.

  6. Configuring the cerification
  7. Select the eduroam SSID

    Selecting eduroam from the Wifi menu

  8. Configure the Android supplicant as follows:

    • EAP Method: PEAP
    • Phase 2 Authentication: MSCHAPv2
    • CA certificate: Select the certificate you downloaded and named earlier
    • Domain: login.wisc.edu
    • Anonymous Identity:anonymous@wisc.edu
    • Identity:NetID@wisc.edu
    • Password:NetID Password
  9. EduroamWifiConfig.jpg

  10. Press connect, and you should now be connected!

    android-connected.png

Additional Information

For more information about eduroam, please visit eduroam.org.

For more information about eduroam's OS auto-detecting Configuration Assistant Tool, please visit cat.eduroam.org.

For additional help setting up and using eduroam, please Get Help from DoIT.

See Also: