Installing the Certificate
- If you have not already installed an eduroam security certificate, click on this link to download: www.its.qmul.ac.uk/network-services/NetworkSupportRootCA-cacert
- In the Downloads window, open the file.
The Add Certificates dialogue box will open and ask you if you want to add the certificate to a keychain. Select either login or system from the Keychain drop-down and click OK.
You will then see a dialogue asking if you want to trust certificates signed by "NetworkSupportRootCA" from now on. If you want to set them to Trusted status, click on 'Always Trust'. (If you don't do this, you'll see a warning message every time you connect to eduroam at QMUL.)
You will be prompted to enter your local password to authorise the change. Enter your account password for the machine you're using. You may need to do this more than once; if nothing seems to happen after the first time you enter your details, check that there is not a second prompt open on your desktop.
Configuring a wireless connection
- Click on the Airport icon on the menu bar (and select Turn AirPort ON if necessary) to see a list of available wireless networks.
- Select 'eduroam' from the list.
If a dialogue appears warning you that: "The server certificate is signed by an unknown root certificate authority", you should check the certificate and satisfy yourself that this is the correct network. To do this, click on 'Show Certificate'.
The Verify Certificate window will expand to display more details. The correct certificate is radius2.qmul.ac.uk, with an expiry date of 13/5/2018.
Above the certificate pane you will see a 'chain of trust' going back to "NetworkSupportRootCA".
If you see a different chain, you are connecting to an unknown server and you should not continue.
If you see the chain but red circles with crosses appear against each entry, the root certificate has not been installed correctly.
You can prevent the warning message "This certificate was signed by an untrusted issuer" by checking 'Always trust these certificates'.
- Click on Continue.
- Log in using either
- a QMUL account (for students that's a College Teaching Service account and for staff it's a College IMAP (email) account), enter your username in the format 'email@example.com'.
- a departmental account, such as those issued by the School of Mathematics or the Department of Electronic Engineering and Computer Science, enter your username as e.g. 'firstname.lastname@example.org' as appropriate. These departments may have arranged for additional services (such as printing) to be available to people who login using departmental accounts. Note however, that using a departmental username may require a department-specific certificate to be installed.
Configuring a wired connection
- Go to Apple > System Preferences > Network.
- Select Ethernet.
- Set 'Configure (IPv4)' to 'Using DHCP'
- Click on the Advanced button.
- Select the 802.1X tab and click on the '+' button to add a new user profile.
- Change the default name to something more memorable, e.g. MyName_eduroam.
- Enter your login details either.
- using a QMUL account - for students this is a College Teaching Service account and for staff it is a College IMAP (email) account; enter your username in the format 'email@example.com'.
- to use a departmental account, such as those issued by the School of Mathematics or the Department of Electronic Engineering and Computer Science (e.g. 'firstname.lastname@example.org') you should first follow any instructions given by the department concerned as department-specific configuration will be required. See, for example, EECS instructions.
- Ensure that TTLS and PEAP are checked in the Authentication box.
- Click on OK, Apply and Connect.