skip to content

IT Help and Support

University Information Services

How to manually configure eduroam on an Android device

We recommend that you manually configure eduroam on an Android device only if you're unable to use the eduroam CAT tool - note that Android 11 may not work with the eduroam CAT, an alternative app is available from Play Store called "geteduroam" (remove existing eduroam configuration first).

Manually configuring eduroam on Android devices can be complicated and prone to error because of the variations between different versions of Android. The 'eduroam CAT' app simplifies this process, and we recommend using it wherever possible (Android version 10 and lower, it may fail for some Android 11 devices). However, if for some reason this process fails, then you can follow the manual instructions below.

Before you begin, make sure:

  • you're in a location where the eduroam wireless network is available
  • you have created a network access token for this device on the UIS token page.
  • you have removed existing eduroam configuration first by forgetting the eduroam wireless network settings (if you have any).

These instructions were written using a OnePlus 5T running Android 8.



Important notes for devices running Android 11

From version 11 onwards the identity certificate presented by an authentication server (such as that used on eduroam) must be validated by your device. In previous versions it was possible to select "Do not validate" or similar in the eduroam settings (this is a security risk), this is no longer possible.

If you have set your eduroam connection up without certificate validation then you will find that you are unable to connect once upgraded to Android 11. You will need to 'forget' and reconfigure your eduroam settings.

We believe that the "eduroam CAT" may not work for all Android 11 devices, there is a new app called "geteduroam" (we will be fully documenting this when we have been able to test it). We recommend trying the new "geteduroam" app (which should be similar in process to the eduroam CAT) or if this doesn't work for you then please use the instructions below to manually configure your eduroam connection. Always remove existing configuration before attempting a new method (go to your wireless networks and 'forget' eduroam).



Download and install the University of Cambridge CA Root certificate.

  • Before you start, remove any current configuration for eduroam. Go to Settings then Wi-Fi. Press and hold on eduroam. If the option to Forget network or similar appears, then select it and continue. If the option to 'Forget network' does not appear you can still continue.
  • Make sure you are connected to the internet (for example, via a mobile network or by connecting to the University's UniOfCam Wi-Fi network.
  • Download the University of Cambridge Wireless Service Root CA.
  • Your device will ask you if you want to download the certificate (wireless-ca.crt). Choose 'Download'.
  • At this point, differences in Android versions may become apparent. The next prompt will ask you how you want to open the certificate file. Select Open with Certificate Installer (or your preferred app).

Certificate Install notification screen

  • You will then be prompted to Name the certificate and identify how it should be used. In the Certificate name field type "University of Cambridge Wireless Root CA" and choose Wi-Fi from the dropdown list for Credential use.

Certificate naming screen


  • If at this point the certificate import fails, you can complete the process manually. Go to SettingsSecurity & lock screenCredential storage and select Install from storage (or equivalent menu options). From your Downloads folder, select the wireless-ca.crt certificate file. Complete the installation steps as instructed.
  • If at this stage you receive an error saying that a Screen lock is required then you will need to set one (even if only temporarily while completing this process) - go to Settings -> Security -> Screen lock (or similar) and set a PIN, Pattern or other Screen lock authentication mode. Once this is done the app should successfully complete the installation of the certificate (you will be prompted for the new Screen lock authentication details).


Once you have installed the certificate, configure eduroam with secure settings.

  • Open your Settings dialogue.
  • Select Wi-Fi.
  • Select eduroam.
  • A settings dialogue box should appear. Select the CA certificate list. The newly installed "University of Cambridge Wireless Root CA" should appear. Select it.
  • Note that if you are running Android 11 or later the option "Do not validate" under CA certificate (or similar) no longer appears. Whichever version of Android you are running we recommend that you enable certificate checking (these instructions guide you to do so) for the best security.
  • In the 'domain' field use "".
  • Complete the other options as described below:
  • Phase-2 Authentication is "MSCHAPV2".
  • Note that your username (identity) is the username of the network access token you created on the UIS token page for this device in the format – for example,
  • The Anonymous identity is "".
  • The Password is the password for the network access token you created for this device.
  • Select Connect.

Your device should now connect to eduroam. Your password will be saved.

UIS Service Desk

Phone padded  Service status line: (01223 7)67999
Website  Sign up for SMS/email status alerts
Website  Read major IT incident reports

UIS bITe-size bulletin

A regular newsletter aimed at the University's IT community, highlighting service and project news from UIS.

Sign up >

Latest news

New University Wireless guest system coming soon

21 October 2021

Our University Wireless team is pleased to announce we'll be launching a new guest wifi system for visitors to the University and members of the public to use when in University buildings. This service will also be available on the 100 or so outdoor access points spread across the city. The new guest wifi will be much...

University Wireless Service maintenance: Tuesday 21 September, 08:00–09:00

16 September 2021

The University Wireless Service will be undergoing essential maintenance between 08:00 and 09.00 on Tuesday 21 September while we apply a security software patch. This is a security update to ClearPass, which provides Wireless Service network access control. We're not expecting any disruption to service, but it should be...

Mailing list migrations from Mailman to Sympa

31 August 2021

We intend to migrate all remaining lists associated with colleges from Mailman to Sympa during the week commencing 13 September 2020. The current total is 1,567. How this will affect users of the mailing list management service Most mailing list subscribers shouldn't notice any difference. During the switchover, there will...