Wireless eduroam

How do I setup eduroam?

NOTE: If you have a Robot that doesn't support wpa2 enterprise please create a ticket  with IST by email: helpdesk@uwaterloo.ca telling them that you need a Wi-fi access for this device.

Staff, Faculty and Students with a WatIAM account

Waterloo Identity and Access Management (WatIAM) credentials are required to authenticate to the wireless network.

Table of contents

  1. How do I connect to Eduroam automatically

  2. How do I connect using configuration assistant tool

  3. How do I connect using Windows 10

  4. How do I connect using IOS device

  5. How do I connect using an Android device

  6. How do I connect using Ubuntu

  7. What if my device is not listed

  8. Map Network Drive Wi-fi

    1. Windows

    2. Mac

  9. Remove Wi-fi profiles

    1. Windows

    2. Mac

  10. Raspberry Pi connection to Eduroam

How do I connect to Eduroam automatically

  1. Select Eduroam from the list of available Wi-Fi networks 
  2. When asked for a userid and password, please enter:
    1. youruserid@uwaterloo.ca 
    2. Your WatIAM password

 How do I connect using eduroam configuration assistant tool?

The eduroam Configuration Assistant Tool is recommended to configure most popular devices for the eduroam wireless network (Windows 10, 8.1, 7, MacOS, Linux, iOS). Android and Blackberry devices should follow the device specific connection guides in order to connect. 

To download the eduroam configuration file for your device:

  1. Visit: eduroam Configuration Assistant Tool. If you are connectet to "uw-wifi-setup-no-encryption", you will see a link to follow that will take you to the configuration assistant tool if you open a web browser.
  2. Click "Download your Eduroam installer" at the bottom of the page
  3. Select "University of Waterloo" from the home institution list. If University of Waterloo is not automatically listed, you will need to search for it in the list.
  4. Select the type of device you are using and download and run the configuration file. 
  5. Follow the on screen instructions and enter your WatIAM credentials. Upon entering your credentials, please attempt connecting to Eduroam.

Back to Table of Contents

 How do I connect to the eduroam wireless network using Windows 10?

If you're unable to connect to Eduroam on Windows 10 using the Configuration Assistant Tool, these detailed instructions will help you to connect to the network.

  1. Using the taskbar search field, search for  Network and Sharing Center.
Taskbar
  1. When the Network and Sharing Center option appears, click on it.
Network
  1. Click on Set up a new connection or network link.
  1. Select Manually connect to a wireless network option, and click Next.
Connection spot
  1. Configure as follows:
    1. Network Name: Eduroam
    2. Security type: WPA2-Enterprise
    3. Encryption type: AES
    4. Check Start this connection automatically
    5. Click Next
  2. Select Change connection settings.
Notification
  1. Go to the Security tab, and click Settings (right of Microsoft: Protected EAP (PEAP).
Settings
  1. Under Trusted root Certification Authorities, slect GlobalSign Root CA and then click Configure...(right of Secure password (EAP-MSCHAP v2 dropwdown).
Settings
  1. Ensure "Automatically use my Windows login name and password (and domain if any)" is unchecked, and click OK. 
  2. Close Protected EAP Properties and eduroam Wireless Network Properties boxes by clicking OK twice.
  3. Close Manually connect to a wireless network window.
  4. Exit Network and Sharing Center window.
  5. When logging in to Eduroam, you will be prompted to enter userid@uwaterloo.ca and WatIAM password. 

Back to Table of Contents

 How do I connect to eduroam wireless network using a iOS device?

  1. In order to connect to eduroam from your iOS device, locate and open the Settings application on your home screen.
    iOS
  2. Select the Wi-Fi option from the left hand side menu and make sure that the Wi-Fi is turned on by toggling the button.
     
    Settings
  3. You will then be presented with a list of available networks under the CHOOSE A NETWORK option. From this list, select eduroam.
     
    WiFi
  4. You will be prompted to input a username and password, please enter your QuestID@uwaterloo.ca and your password for the username and password respectively.
     
    Username and password
  5. Select Join once you have entered your username and password.
     
  6. You will then be prompted to Accept a certificate in order to connect to the network.
     
    Settings
  7. Once you have accepted the certificate, you will be connected to the network and you will notice that it is now listed under Wi-Fi and there will be a Wi-Fi icon at the top of your screen.
    Settings

You are now connected to the eduroam wireless network. From now on, your computer will automatically connect to this wireless network.

Back to Table of Contents

How to connect to the eduroam wireless network using an android device

  1. From the home screen, pull down the drag menu on the top of the screen. Press and hold on the wi-fi icon OR select Settings by clicking the gear icon. In Settings, go to Network & Internet and then click Wi-Fi. Edit media 
Android settings
Settings

2. Ensure that Wi-Fi is turned on and locate the eduroam wireless network.
 

Settings
Settings

3. After clicking on Eduroam, a setting popup where you will configure Eduroam for use.

  • Set the EAP method as PEAP
  • Set Phase 2 Authentication as MSCHAPV2
  • Set CA Certificate as (Unspecified)
  • Enter your uwaterloo email address in the Identity field in the format userID@uwaterloo.ca (replace userID with your WatIAM userID)
  • Leave Anonymous blank
  • In the Password field, enter your WatIAM password
Settings
  1.  Click Connect and you should be connected.
Settings

Eduroam and Android 7.x.x

  1. Tap Settings.
  2. From the menu, tap Wireless networks.
  3. Tap Wi-Fi settings.
  4. Tap eduroam.
  5. From the EAP method drop-down list, tap PEAP.
  6. From the Phase 2 authentication drop-down list, tap MSCHAPv2.
  7. From the CA certificate drop-down list, tap Use system certificates.
  8. In the Domain text box, type: eduroam.uwaterloo.ca
  9. In the Identity text box, type your UWaterloo email address in the format watiam@uwaterloo.ca(replace watiam with your WatIAM username).
  10. Clear the Anonymous identity text box so that it is empty.
  11. In the Password text box, type your WatIAm password.
  12. Tap Connect.

Back to Table of Contents

  1. Click on the wireless option at the top right of your screen and select the eduroam network.
     
    Linux
  2. A window will appear with numerous options and a username/password field. Match those options to the ones shown below and place your UWaterloo user ID (followed by “@uwaterloo.ca”) in the username field, with your UWaterloo password in the password field.
     
    Linux Settings
  3. Then, click on the folder icon next to the CA certificate field. In the file picker dialog, choose file system on the left, and then navigate to: /etc/ssl/certs and choose "GlobalSign_Root_CA.pem". 
     
    Linux Settings
  4. After choosing the appropriate CA certificate, your screen should look like the following picture. You can now click the “Connect” button.
     
    Linux Settings
  5. Upon clicking “Connect” your computer will require a few moments to connect to the Internet. After the process succeeds, you will see a confirmation message in the top right of your screen which states that you are connected to Eduroam.
    Confirmation message
  6. The instructions above have been certified to work with Ubuntu 12.04 LTS and 13.04. If you were unable to connect via the above instructions, please try connecting with one of the other 2 Global Sign Root CA certificates shown in Step three. For other versions of Ubuntu, the process may differ slightly.
  7. For non-Ubuntu distributions, the process is similar. Check to see if your distribution uses the Network Manager applet. If so, you may be able to use the steps above. However, if your distribution does not include the Network Manager applet, or if your distribution uses wicd, you may need to install and configure wpa_suppliant manually.
  8. If you would like to download your own copy of the certificate, you can find the certificate text on the Global Sign website. You may do so by using wired Internet access, or by using the uw-unsecured network.

Back to Table of Contents

 What if my device is not listed above?

If your device isn’t listed above, here are the full settings (but in most cases, after selecting the Eduroam wi-fi network, you should just need to enter your userid@uwaterloo.ca and your password).

  1. Network SSID: eduroam
  2. Network authentication method: WPA2 Enterprise
  3. Data encryption method: AES
  4. Authentication method: Protected EAP (PEAP)
  5. Inner authentication(or Phase 2 Authentication): MSCHAPv2
  6. CA Certificate: GlobalSignRootCA
  7. User ID: userid@uwaterloo.ca
  8. Password: Your WatIAM password

Back to Table of Contents

 How do I map a campus-based network drive over Wi-Fi

In order to get access to your files located on a network drive, while you are having a presentation using a laptop with Wi-Fi connection, make sure your laptop is:

  1. Connected to Wi-Fi (eduroam)
  2. Connected to Virtual Private Network (VPN)
  3. If you accessing a network drive, make sure your drive is mapped

Map a network drive (Windows)

  1. In the Start menu, click Computer.
  2. In the next window, click Map Network Drive.
  3. In the Folder box, select letter “N” and type the path to the server:
    \\ecfile1.uwaterloo.ca\userid
  4. Click Reconnect at logon
  5. In the User name box, type your WatIAM ID: nexus\yourid
  1. In the Password box, type your WatIAM password, and then click OK

Back to Table of Contents

Map a network drive (MacOS)

  1. Switch to the “Finder” application (click on any empty place on your Mac desktop).

  2. Click “Go” on the Finder menu, then click “Connect to Server…” from the drop-down list, or use the keyboard shortcut “command+K”.

  3. Enter the following for the N drive in the “Server Address:” input field: N drive: smb://ecfile1.uwaterloo.ca/userid

  4. Click on the “Connect” button in the lower-right corner of the window.

  5. You will be prompted for your WatIAM credentials: userid and your password.

Back to Table of Contents

How do I remove Wi-Fi profiles from Windows 10

When you connect to a wireless network, the settings and profile of that specific network is saved on your computer so that you won’t have to re-enter your network credentials, such as the wireless security key to connect the next time. Once your computer is in range with the wireless network profile that is saved on your computer, it will automatically attempt to connect to that wireless network you have previously connected to.

If you have connected to various wireless networks before, your computer may have problems connecting wirelessly. Removing wireless network profiles on your computer will improve your wireless connectivity.

To start a command prompt as an administrator

In the search box on the taskbar input "Command Prompt"

Right-click Command prompt, and then click Run as administrator.

If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.

Type the following command:

netsh wlan show profiles > press enter

Locate the name of the wireless profile you'd like to forget.

Type the following command:

netsh wlan delete profile “PROFILE NAME”

Replace the “Profile Name” with the name of the Wi-Fi network you want to erase.

Example:

netsh wlan delete profile eduroam or netsh wlan delete profile uw-unsecured

Now, you are ready to connect to eduroam secured network AT Univertsity of Waterloo

Connecting to the eduroam wireless network

Waterloo Identity and Access Management (WatIAM) credentials are required to authenticate to the wireless network.

  1. Select Eduroam from the list of available Wi-Fi networks.
  2. When asked for a userid and password enter your full userid@uwaterloo.ca and your WatIAM password.

Back to Table of Contents

 How do I remove wi-fi profiles from OS X

  1. Go to System Preferences > Network and select Wi-Fi on the left side as shown below:

iOS Settings
  1. Ensure you are disconnected from the wireless network by clicking on the Disconnect button. The Network Name should show No network selected as seen below:
iOS Settings
  1. Click on the Advanced button
  2. Select the wireless network from the list as shown:
iOS Settings
  1. Then click on the "-" button to remove it from the list
    1. Note: you maybe prompted to confirm the removal
  2. Click on the OK button
  3. Click the Apply button

Back to Table of Contents

How to connect a Raspberry Pi to Eduroam

Please follow the instructions below:

  1. Please download the certificate first and save it somewhere on your machine's hard drive. Here is the link: Global Sign Certs
  2. Open "/etc/network/interfaces"
    Go to File Manager, and navigate to "/etc/network" (no quotes).. Right click on the file called interfaces, and select Open With... → proceed to Custom Command Line. Under the Command line to execute, type in "sudo leafpad" (no quotes). Press Ok
  3. Edit "/etc/network/interfaces" (ignore all "#" lines; they are just there for comments). Save and Close afterwards. 
    1. auto lo
    2. iface lo inet loopback
    3. iface eth0 inet manual
    4. allow-hotplug wlan0
    5. iface wlan0 inet manual
    6. wpa-roam /etc/wpa_supplicant/wpa_supplicant.conf
    7. iface default inet dhcp
  4. Open "/etc/wpa_supplicant/wpa_supplicant.conf" 
    Navigate to "/etc/wpa_supplicant" (no quotes). Right click on the file called wpa_supplicant.conf. Then, select Open With... → proceed to Custom Command Line. Under the Command line to execute, type in "sudo leafpad" (no quotes). Press Ok.
  5. Edit "/etc/wpa_supplicant/wpa_supplicant.conf". Don't forget to Save and Close the file. 
    Don't just copy and paste the code below. Please read to make sure to read every line carefully before editing the wpa_supplicant.conf script. (Note: "#" is a comment to guide you where you need to go.)
  6. This is the common configuration script for "wpa_supplicant.conf" file you will need to connect to Eduroam:
    1. network={
    2.    
    3. ssid="eduroam"   
    4. identity="myuserid@uwaterloo.ca"     
    5. password="mypass"   
    6. ca_cert="/etc/certs/ROOT-R1.crt"
    7. ## replace ROOT-R1.crt with the certs file  
    8. key_mgmt=WPA-EAP   
    9. eap=PEAP   
    10. phase2="auth=MSCHAPV2"    
    11. scan_ssid=0   
    12. mode=0
    13. }

Back to Table of Contents