Note: You must be running 10.7.3 or later to use eduroam. There is an issue with earlier versions of 10.7 which prevents connection.
To use these instructions you must be in a location where eduroam is available and you already have a working network connection. We recommend the following configuration method as being the most straightforward way of ensuring that you have the correct configuration settings on your computer.
Installation and configuration steps
Make sure that you have your credentials (eduroam identifier and Network access token (username and password)) from the UIS Tokens service.
- Ensure you have a working network connection.
- Download the eduroam profile from this site.
- Double click the downloaded file (eduroam.mobileconfig). System Preferences will load and prompt you to install the eduroam profile.
- Click Continue
- Fill in your username (your eduroam identifier) and password (your network access token) details (ideally you will have these to hand, as outlined above; if not then retrieve them from the UIS Tokens service), then click Install.
- You may be prompted to authenticate with an administrator account and password for your Mac at this point.
- Once complete click the Show All button and then choose the Network Preference Pane.
- Highlight Wi-Fi and click the Advanced button. Drag eduroam above UniOfCam (or Lapwing) in the list of wireless networks (this means eduroam will be preferred). Click OK.
- Ensure Network Name is set to eduroam then click Connect to join the eduroam network.
- You may be prompted to accept the certificate used for the eduroam service.
If so click Show Certificate.
- Untick the Always trust network.tokens.csx.cam.ac.uk box
- set Extensible Authentication to Always Trust.
- Ensure that X.509 Basic Policy is set to No Value Specified.
- Once the certificate usage is configured you will be prompted to authenticate using your Mac administrator name and password again.
Your computer will now be authenticated to eduroam and you should be able to access the internet. If you get an error saying that authentication has failed, double-check the above steps.
All the settings you have made are stored in your computer and should not need re-entering each time you connect to the eduroam network.
If you experience any problems with these instructions you should try removing your profile (see below) and then try again. If you are still unable to connect, then contact the Service Desk for assistance.
eduroam certificate fingerprints
sha1: 17 DF 84 40 E2 5C ED 7A 81 F0 89 E9 2D 52 B4 6C A5 A0 1E EB
md5: 27 DB 62 C8 FC 1E 21 4C 3D 3A EA 5A 01 27 E6 BC
To uninstall the profile open the Profiles pane in System Preferences, highlight the eduroam profile and click the minus sign at the bottom. Authenticate as an admin user if prompted.