We strongly recommend that you have Service Pack 3 installed to use eduroam on Windows XP.
Configuring a connection using the QMUL eduroam installer
- If you have not already installed eduroam security certificates, download one or both of these zipped files:
- Extract the file and run the installer. Please note you need to be using an Administrator account on your computer for this to work.
Once you have completed the install, the PC should attempt to connect.
- If it doesn't, attempt to connect manually by switching to the eduroam network in the Wireless Networks dialogue or double-clicking the Local Area Network connection in Control Panel under Network Connections.
- You should be prompted by a text bubble at the bottom of the screen to 'click here to select a certificate or enter other credentials for connection to the network eduroam'.
- Click on this bubble to enter your username and password, using either
- a QMUL account - for students this is a College Teaching Service account and for staff it is a College IMAP (email) account; enter your username in the format 'email@example.com'.
- a departmental account such as those issued by the School of Mathematics or the Department of Electronic Engineering and Computer Science (e.g. 'firstname.lastname@example.org') - you should first follow any instructions given by the department concerned as department-specific configuration will be required. See, for example, EECS instructions.
- Leave the 'Logon domain' empty.
If you have any problems with the installers, you can also configure your machine manually as below.
Configuring a wired or wireless connection manually.
- Download this certificate: www.its.qmul.ac.uk/network-services/NetworkSupportRootCA-cacert, open the file and select Install Certificate... Then follow the steps in the Install Certificate wizard.
- Select the 'Place all certificates in the following store' option and click Browse to find the 'Trusted Root Certification Authorities' store.
- Click Next and then Finish to complete the Wizard.
- A Security Warning will appear giving the thumbprint of the certificate.
- Check that the sha1 Thumbprint value DC222A72 5753C582 1BCCDA65 26944E45 75D2BCB4 matches the Thumbprint on your screen. If so, click Yes. You should get a box indicating the import was successful.
If using a wireless connection
- Go to Control Panel > Network Connections.
- Right click on Wireless Network Connection and if you are in an area that has eduroam click on 'View Wireless Networks' and attempt to connect to eduroam.
- This should say it was unable to find a certificate so now click on 'Change Advanced Settings' in the Wireless Network Connection box.
- Click on the Second tab 'Wireless Networks' Select 'eduroam' from list of preferred networks and click 'properties'. If eduroam does not appear in the list or you are not in an area with eduroam, click on Add and follow the instructions below, setting the Network name to 'eduroam'.
- The first tab 'Association' needs to have 'WPA2' selected for Network Authentication and 'AES' for Data encryption.
- If you do not have WPA2 as an option please contact the IT Helpdesk.
If using a wired connection
- Connect your machine to the network port and open Control Panel -> Network Connections. You will see a Local Area Connection interface. This connection is to a default LAN, which forms a stepping stone for setting up your eduroam connection.
- Right-click on the connection and open Properties.
NOW CONTINUE FROM HERE FOR BOTH WIRELESS AND WIRED
- Under the 'Authentication' , EAP type should be set to 'Protected EAP (PEAP)' and the two boxes 'Authenticate as computer' or 'Authenticate as guest' shoudl be unchecked.
- Click on the Properties button below the EAP type.
- Check the 'Validate server certificate' box.
- Select the certificate 'NetworkSupportRootCA', fromn the 'Trusted Root Certification Authorities' list.
- Select 'Secured password (EAP-MSCHAP v2)' for the Authentication Method.
- Click the 'Configure' button next the Authentication Method and uncheck the box 'Automatically use my Windows logon name and password'.
- Click OK.
Once you have completed this the PC should attempt to connect. If not, double click the connection.
- You should be prompted (by a bubble at the bottom of the screen) to enter additional information to connect to the network. Click on this bubble to enter your username and password.
- Log in
- using a QMUL account - for students this is a College Teaching Service account and for staff it is a College IMAP (email) account; enter your username in the format 'email@example.com'.
- to use a departmental account such as those issued by the School of Mathematics or the Department of Electronic Engineering and Computer Science (e.g. 'firstname.lastname@example.org'), you should first follow any instructions given by the department concerned as department-specific configuration will be required. See, for example, EECS instructions.
If you are setting up a wired connection, you may find that it takes up to three minutes for the connection to be established. This is an issue with the built-in Windows 802.1x supplicant and can be resolved by installing an alternative supplicant. There is a working open source supplicant available from JANET(UK). For more information please refer to the JANET 802.1X Supplicant page and to download please visit Sourceforge.