Personal tools
University Computing Service

Wireless networking

Configuring eduroam - Windows Vista

These instructions are for configuring wireless access to eduroam on Windows Vista using the built-in wireless networking configuration utility.

  • If the computer is not shared, i.e. you are the only user, then just follow the user configuration steps below.
  • If the computer is shared then you first need to make sure the settings will allow each user to connect to eduroam using their own credentials. To do this you need to change the Wireless Network Profile Type.

Multi-user machines - changing the profile type

To allow each user to connect to eduroam using their own credentials:-

  • Go to Start, then Control Panel, then Network and Internet, then Network and Sharing Centre.
  • From the list on the left choose Manage Wireless Networks
  • Select Profile Type
  • Change the Windows Network Profile Type to Use all-user and per-user profiles
    Changing profile type

Each user may then configure eduroam following the steps below.

User Configuration steps

Make sure that you have your credentials (eduroam identifier and Network access token (username and password)) from the UCS Tokens service.

NOTE: Before you begin the steps below, you must be connected to the network fully (on Lapwing/Raven or an office or home connection) and browse to the UCS Tokens service page using Internet Explorer 6 or above (if you use a third-party browser such as Firefox or Google Chrome, this will not work). This causes your browser your to automatically retrieve some information required in the certificate authority step below.

  1. Go to Start, then Control Panel, then Network and Internet, then Network and Sharing Centre
  2. From the list on the left choose Manage Wireless Networks
  3. Select Add
    Manage Wireless Networks box
  4. Select Manually create a network profile
    Create network profile choice
  5. In the information box
    Wireless Network Connection information box
    • In the Network name box, type eduroam (note the lower-case 'e')
    • From the drop-down lists
      • from Security type choose WPA2-Enterprise (or WPA-Enterprise if your wireless card doesn't support WPA2)
      • from Encryption type choose AES (or TKIP if your wireless card doesn't support AES)
    • If the computer has been set up for multiple users then make sure that the additional setting - Save this network for me only - is selected.
    Select Next
  6. Select Change connections settings then, on the Connection tab uncheck Connect to a more preferred network if available
  7. Select the Security tab
    Security tab settings
    • from the drop-down list for Choose a network authentication method choose Protected EAP (PEAP)
    • Select Settings…
  8. Complete the settings in this dialogue box as shown:
    Protected EAP (PEAP) Properties dialogue box AddTrust
    • Tick Connect to these servers, making the text field below available…
    • …in this box, enter network.tokens.csx.cam.ac.uk.
    • From the list of Trusted Root Certification Authorities, scroll down to find AddTrust External CA Root and tick the box next to it; If AddTrust External CA Root is not in the list of Trusted Root Certification Authorities then see the step at the top of this page
    • Tick the box next to Do not prompt user to authorize new servers or trusted certification authorities.
  9. The drop-down list under Select Authentication Method should already have Secured password (EAP-MSCHAP v2) selected - select the Configure... button next to it to open the EAP MSCHAPv2 Properties dialogue box:
    EAP MSCHAPv2 Properties
  10. Untick the box next to Automatically use my Windows logon name and password (and domain if any) then select OK
  11. Select OK to close all the different dialogue boxes
  12. Select Close to close the "Manually connect to a wireless network" box
  13. After a short period of time, your computer should detect the eduroam wireless network and display a balloon, asking if you want to enter your details to connect to it:
    Balloon offering connection to wireless network
  14. Click in the balloon and a dialogue box will appear, prompting you for your credentials
  15. Complete the dialogue box using the Network Authentication credentials given on the UCS Tokens service:
    • Your User name will be the eduroam identifier shown (typically your CRSid followed by @cam.ac.uk).
    • Your Password will be the Network access token shown.
  16. Select OK

If you get an error saying that authentication has failed, double-check the above steps. In particular check that, in step 8, you have typed network.tokens.csx.cam.ac.uk and not network-tokens.csx.cam.ac.uk (i.e. a full stop not a hyphen). If you are still unable to connect contact the Service Desk for assistance.

All the settings you have made are stored in your computer and should not need re-entering each time you connect.

By default Vista assigns a Private location type to eduroam. This means that your computer is visible to other computers using eduroam. We suggest that you change this to Public. To do this, while you are connected to eduroam:-

  • Go to Start, then Control Panel, then Network and Internet, then Network and Sharing Centre
  • Select the Customize link
    changing the network type, step 1
  • On the window that opens select Public
    changing the network type, step 2
    Select Next then Close.