Personal tools
University Computing Service

Wireless networking

Configuring eduroam - Mac OS 10.7 (Lion)

Note: You must be running 10.7.3 or later to use eduroam or Lapwing. There is an issue with earlier versions of 10.7 which prevents connection.

To use these instructions you must be in a location where both Lapwing and eduroam are available. We recommend this method as being the most straightforward way of ensuring that you have the correct configuration settings on your computer.

Installation and configuration steps

Make sure that you have your credentials (eduroam identifier and Network access token (username and password)) from the UCS Tokens service.

  1. Join the Lapwing network, authenticate using your Raven credentials (for further information on joining the Lapwing network please see How to use Lapwing).
  2. Download the eduroam profile.
  3. Double click the downloaded file (eduroam.mobileconfig). The System Preferences will load and prompt you to install the eduroam profile.
    prompt to install
  4. Click Continue
  5. Fill in your username (your eduroam identifier) and password (your network access token) details (ideally you will have these to hand, as outlined above; if not then retrieve them from the UCS Tokens service), then click Install.
    user settings screen
  6. You may be prompted to authenticate with an administrator account and password for your Mac at this point.
    prompt for Mac administrator name and password
  7. Once complete click the Show All button and then choose the Network Preference Pane.
  8. Highlight Wi-Fi and click the Advanced button. Drag eduroam above Lapwing in the list of wireless networks (this means eduroam will be preferred over Lapwing). Click OK.
  9. Ensure Network Name is set to eduroam then click Connect to join the eduroam network.
  10. You may be prompted to accept the certificate used for the eduroam service.
    accept certificate prompt
    If so click Show Certificate.
  11. Now
    • Untick the Always trust network.tokens.csx.cam.ac.uk box
    • set Extensible Authentication to Always Trust.
    • Ensure that X.509 Basic Policy is set to No Value Specified.
    certificate settings
  12. Once the certificate usage is configured you will be prompted to authenticate using your Mac administrator name and password again.
    second Mac OS administrator name and password request

Your computer will now be authenticated to eduroam and you should be able to access the internet. If you get an error saying that authentication has failed, double-check the above steps.

All the settings you have made are stored in your computer and should not need re-entering each time you connect to the eduroam network.

If you experience any problems with these instructions you should try removing your profile (see below) and then try again. If you are still unable to connect, then contact the Service Desk for assistance.

Uninstallation

To uninstall the profile open the Profiles pane in System Preferences, highlight the eduroam profile and click the minus sign at the bottom. Authenticate as an admin user if prompted.