How to connect to eduroam - Manual Configurations

!Please read before continuing!

This document provides instructions for maually configuring a personal device to eduroam using your ESMT credentials. Use these instructions only if you are unable to configure eduroam using the Configuration Assistant Tool (eduroam CAT).  eduroam CAT insures that eduroam is configured correctly to protect your username and password when connecting to eduroam networks.

eduroam CAT installers for ESMT

eduroam CAT guides for ESMT

Table of contents

Windows 8 / 10 

Android

Mac OS X

iOS

Windows 7

Option 1 - Manual configuration

Option 2 - Configuration script

General settings

Network name (SSID): eduroam
EAP-Method: PEAP
Encryption method: AES
Phase 2-Authentication: MSCHAPV2
CA-Certificate: http://pki.esmt.org/pki/rootCA.crt
Authentification server: B-NPS-01.global.esmt.org
Identity: your full ESMT email address (e.g. firstname.lastname@mim2015.esmt.org)
Password: your ESMT password

Windows 8 / Windows 10

1. Select eduroam from the wireless connection list.
2. Enter your credentials.
   username (full email address, e.g.) = firstname.lastname@mim2015.esmt.org 
   password = your ESMT password
3. Click Connect.

Android

Install Deutsche Telekom Certificate

Before connecting to eduroam you must download and install the correct certificate. This step is important in order to protect your ESMT password from being collected by "fake" eduroam networks. 

1. Open the native Android or Google Chrome web browser and download the Certificate from the following URL: http://pki.esmt.org/pki/rootCA.crt
2. You should be automatically prompted to name the certificate and choose where the credential is going to be used. Name the certificate and choose Credential use: Wi-Fi. (Note: Other mobile browsers such as Firefox may not open the file properly and offer these options. Please download and open the file with the native Android browser or Google Chrome.)

1. Select eduroam from the wireless connection list.
2. Complete the fields as pictured and click Save.
   EAP-Method: PEAP
   Phase 2-Authentication: MSCHAPV2
   CA-Certificate: (choose the certificate that you downloaded in the steps above)
   Identity: your full ESMT email address (e.g. firstname.lastname@mim2015.esmt.org)
   Password: your ESMT password

Mac OS X

1. Select eduroam from the Airport menu bar item.
2. When prompted, enter your ESMT username and password. Then click Join.
   username (full email address, e.g.) = firstname.lastname@mim2015.esmt.org
   password = your ESMT password
3. When prompted with a Verify Certificate window, select Show Certificate.
4. Select Always trust and click Continue.
5. You should now be connected to the eduroam WLAN.

iOS

1. Select eduroam from the Choose A Network list.
2. When prompted, enter your ESMT username and password. Then click Join.
   username (full email address, e.g.) = firstname.lastname@mim2015.esmt.org
   password = your ESMT password
3. When prompted with a Certificate window, choose Trust.
4. You should now be connected to the eduroam WLAN.

Windows 7

Option 1 - Manual Configuration

1. Open Wireless Connection and click on Open Network and Sharing Center.
2. Click on Manage wireless networks.
3. Click Add.
4. Select Manually create a network profile.
5. Complete the fields as pictured and click Next.
   Network name: eduroam
   Security type: WPA2-Enterprise
   Encryption type: AES
6. Select Change connection settings.
7. On Security tab select Advanced settings before making other setting changes.
8. Set authentication mode to User authentication. Additionally you can set your credentials by clicking the Save credentials button.
   username (full email address, e.g.) = firstname.lastname@mim2015.esmt.org
   password = your ESMT password
9. On Security tab select Settings
10.  Uncheck Validate server certificate.
11.  Select Configure and uncheck Automatically use my Windows logon name and password.

Option 2 - Configuration Script

If you would prefer to let an installer script perform the configuration steps described above for you, you can use the steps provided below. 

While these steps and the provided script files have been developed with care and with the intent to only make the configuration changes described above, we cannot take responsibility for unintended consequences following their use. By using this tool you are acknowleding that you understand that this tool is not required for use of eduroam, that you have permission to allow this tool to make changes to your computer's network settings and that you take responsibility for use of the tool.

Steps

1. Download the file  eduroam_Windows7_Configurator.zip.
2. Unzip the downloaded file.
3. Browse to the unzipped folder.
4. Double-click eduroam.cmd to run the configuration script.
5. Once the configuration script has succeeded, the eduroam settings as described in Option 1 - Manual Configuration should be configured and eduroam ready to use.