Configuring eduroam - Windows XP

These instructions are for configuring wireless access to eduroam on Windows XP with Service Pack 2 or greater using the built-in wireless networking configuration utility.

• View a screencast of the process detailed below then use the back button in your browser to return here.

Feedback to us about this screencast

Configuration steps

1. Open Network Connections. The way to do this varies, depending on how your Windows environment is customised:
   • In the default situation select Start, then Control Panel, then Network and Internet Connections, then Network Connections.
   • If you use the Classic View of Control Panel, select Start then Control Panel, then Network Connections.
   • If you have the Control Panel displayed as a submenu from the Start Menu, one of the options will be Network Connections.
   • If you are using the Classic View of the Start menu and the Control Panel option is not shown select Settings, then select Control Panel from the submenu.

2. From the Network Connections window, double-click on your wireless network adapter (this will probably be one of the icons, with the word 'Wireless' somewhere in the text below it):

   
3. The Wireless Network Connection Status dialogue box opens.
   • If you are not connected to a wireless network you will already be at the next step.
   • If you are already connected to a wireless network (e.g. Lapwing, as in the image below) select View Wireless Networks.
     
4. The Wireless Network Connection window will open (the exact title will depend on the name of the wireless network adapter you have in your computer)
   • If you see a list of available wireless networks, select Change the order of preferred networks from the options on the left (DO NOT select eduroam from the list on the right at this point!):
     
   • If a list of wireless networks is not displayed on the right hand side and you get the message shown below
     
     you have a third-party wireless networking utility. You will need to follow the instructions for that instead - you cannot follow these instructions any further unless you can disable that utility. Information on configuring the popular Intel PROSet/Wireless utility, used on many laptops with Intel wireless network interfaces, is provided.
5. The Wireless Network Connection Properties dialogue box will open, showing the list of configured wireless networks. Click on the Add... button:
   
6. The Wireless network properties dialogue box will open, showing the Association tab which allows the settings for a new connection to be configured:
   
7. Complete the settings in this tab of the dialogue box as shown above:
   • In the Network name (SSID) box, type eduroam (note the lower-case 'e')
   • From the drop-down lists
     • from Network Authentication choose WPA2 and from Data encryption choose AES (if they are available)
     • if WPA2 is not available, choose WPA from Network Authentication and TKIP from Data encryption
     • if neither WPA2 nor WPA are available the wireless network card you have in your computer is too old and you cannot use eduroam at the University of Cambridge.
8. Now select the Authentication tab at the top of the window (DO NOT 'OK' the dialogue box at this point!)
   
9. Complete the settings in this tab of the dialogue box as shown above:
   • From the drop-down list selecting the EAP type, choose Protected EAP (PEAP).
   • Untick Authenticate as computer when computer information is available.
10. Again, DO NOT 'OK' the dialogue box but click on the Properties button under the EAP type drop-down list to open the Protected EAP Properties dialogue box:
11. Complete the settings in this dialogue box:
    • Tick Connect to these servers, making the text field below available…
    • …in this box, enter network.tokens.csx.cam.ac.uk.
    • From the list of Trusted Root Certification Authorities, scroll down to find AddTrust External CA Root
      
      If AddTrust External CA Root is not in the list of Trusted Root Certification Authorities then see the step at the top of this page
    • Tick the box next to Do not prompt user to authorize new servers or trusted certification authorities.
12. The drop-down list under Select Authentication Method should already have Secured password (EAP-MSCHAP v2) selected - select the Configure... button next to it to open the EAP MSCHAPv2 Properties dialogue box:
    
13. Untick the box next to Automatically use my Windows logon name and password (and domain if any) then select OK
14. Select OK in the Protected EAP Properties dialogue box.
15. Select OK in the Wireless network properties dialogue box.
16. The Wireless Network Connection Properties dialogue box will now be displayed again. You can prioritise connecting to eduroam over other wireless networks (for example, preferring it to Lapwing), if more than one is available at any time, by selecting it in the Preferred networks list and then using the Move up button to move it up the list and set the order of preference.
    
17. Click OK in the Wireless Network Connection Properties dialogue box.
18. After a short period of time, your computer should detect the eduroam wireless network and display a balloon, asking if you want to enter your details to connect to it:
    
19. Click in the balloon and a dialogue box will appear, prompting you for your credentials:
    
20. Complete the dialogue box using the Network Authentication credentials given on the UCS Tokens service:
    • Your User name will be the eduroam identifier shown (typically your CRSid followed by @cam.ac.uk).
    • Your Password will be the Network access token shown.
21. Click OK and, after a few seconds, you should see another balloon, confirming you are connected to the eduroam wireless network:
    

If you get an error saying that authentication has failed, double-check the above steps. In particular check that, in step 11, you have typed network.tokens.csx.cam.ac.uk and not network-tokens.csx.cam.ac.uk (i.e. a full stop not a hyphen). If you are still unable to connect contact the Service Desk for assistance.

All the settings you have made are stored in your computer and should not need re-entering each time you connect: when the eduroam network is in range, the connection balloon should automatically appear, informing you that you have connected successfully.