skip to primary navigationskip to content
 

Configuring eduroam - Mac OS Mountain Lion (10.8) to High Sierra (10.13)

Note: You must be running 10.8.5 or later to use eduroam. There is an issue with earlier versions which prevents connection.

To use these instructions you must be in a location where eduroam is available and you already have a working network connection. We recommend the following configuration method as being the most straightforward way of ensuring that you have the correct configuration settings on your computer.

Installation and configuration steps

Make sure that you have your credentials (eduroam identifier and Network access token (username and password)) from the UIS Tokens service.

  1. Ensure you have a working network connection.
  2. Download the eduroam profile from this site.
  3. Double click the downloaded file (eduroam.mobileconfig). System Preferences will load and prompt you to install the eduroam profile.
    prompt to install
  4. Click Continue
  5. Fill in your username (your eduroam identifier) and password (your network access token) details (ideally you will have these to hand, as outlined above; if not then retrieve them from the UIS Tokens service), then click Install.
    user settings screen
  6. You may be prompted to authenticate with an administrator account and password for your Mac at this point.
    prompt for Mac administrator  name and password
  7. Once complete click the Show All button and then choose the Network Preference Pane.
  8. Highlight Wi-Fi and click the Advanced button. Drag eduroam above UniOfCam (or Lapwing) in the list of wireless networks (this means eduroam will be preferred). Click OK.
  9. Ensure Network Name is set to eduroam then click Connect to join the eduroam network.
  10. You may be prompted to accept the certificate used for the eduroam service.
    accept certificate prompt
    If so click Show Certificate.
  11. Now
    • Untick the Always trust network.tokens.csx.cam.ac.uk box
    • set Extensible Authentication to Always Trust.
    • Ensure that X.509 Basic Policy is set to No Value Specified.
    certificate settings
  12. Once the certificate usage is configured you will be prompted to authenticate using your Mac administrator name and password again.
    second Mac OS administrator   name and password request

Your computer will now be authenticated to eduroam and you should be able to access the internet. If you get an error saying that authentication has failed, double-check the above steps.

All the settings you have made are stored in your computer and should not need re-entering each time you connect to the eduroam network.

If you experience any problems with these instructions you should try removing your profile (see below) and then try again. If you are still unable to connect, then contact the Service Desk for assistance.

eduroam certificate fingerprints

sha1: 17 DF 84 40 E2 5C ED 7A 81 F0 89 E9 2D 52 B4 6C A5 A0 1E EB
md5: 27 DB 62 C8 FC 1E 21 4C 3D 3A EA 5A 01 27 E6 BC

Uninstallation

To uninstall the profile open the Profiles pane in System Preferences, highlight the eduroam profile and click the minus sign at the bottom. Authenticate as an admin user if prompted.

Contact

If you have any enquiries regarding UIS network services, or other University network topics, please send an email to: