skip to content

IT Help and Support

University Information Services
 

How to manually configure eduroam on an Android device

We recommend that you manually configure eduroam on an Android device only if you're unable to use the eduroam CAT tool - note that Android 11 may not work with the eduroam CAT, an alternative app is available from Play Store called "geteduroam" (remove existing eduroam configuration first).

Manually configuring eduroam on Android devices can be complicated and prone to error because of the variations between different versions of Android. The 'eduroam CAT' app simplifies this process, and we recommend using it wherever possible (Android version 10 and lower, it may fail for some Android 11 devices). However, if for some reason this process fails, then you can follow the manual instructions below.

Before you begin, make sure:

  • you're in a location where the eduroam wireless network is available
  • you have created a network access token for this device on the UIS token page.
  • you have removed existing eduroam configuration first by forgetting the eduroam wireless network settings (if you have any).

These instructions were written using a OnePlus 5T running Android 8.

 

 

Important notes for devices running Android 11

From version 11 onwards the identity certificate presented by an authentication server (such as that used on eduroam) must be validated by your device. In previous versions it was possible to select "Do not validate" or similar in the eduroam settings (this is a security risk), this is no longer possible.

If you have set your eduroam connection up without certificate validation then you will find that you are unable to connect once upgraded to Android 11. You will need to 'forget' and reconfigure your eduroam settings.

We believe that the "eduroam CAT" may not work for all Android 11 devices, there is a new app called "geteduroam" (we will be fully documenting this when we have been able to test it). We recommend trying the new "geteduroam" app (which should be similar in process to the eduroam CAT) or if this doesn't work for you then please use the instructions below to manually configure your eduroam connection. Always remove existing configuration before attempting a new method (go to your wireless networks and 'forget' eduroam).

 

1

Download and install the University of Cambridge CA Root certificate.

  • Before you start, remove any current configuration for eduroam. Go to Settings then Wi-Fi. Press and hold on eduroam. If the option to Forget network or similar appears, then select it and continue. If the option to 'Forget network' does not appear you can still continue.
  • Make sure you are connected to the internet (for example, via a mobile network or by connecting to the University's UniOfCam Wi-Fi network.
  • Download the University of Cambridge Wireless Service Root CA.
  • Your device will ask you if you want to download the certificate (wireless-ca.crt). Choose 'Download'.
  • At this point, differences in Android versions may become apparent. The next prompt will ask you how you want to open the certificate file. Select Open with Certificate Installer (or your preferred app).

Certificate Install notification screen

  • You will then be prompted to Name the certificate and identify how it should be used. In the Certificate name field type "University of Cambridge Wireless Root CA" and choose Wi-Fi from the dropdown list for Credential use.

Certificate naming screen

 

  • If at this point the certificate import fails, you can complete the process manually. Go to SettingsSecurity & lock screenCredential storage and select Install from storage (or equivalent menu options). From your Downloads folder, select the wireless-ca.crt certificate file. Complete the installation steps as instructed.
     
  • If at this stage you receive an error saying that a Screen lock is required then you will need to set one (even if only temporarily while completing this process) - go to Settings -> Security -> Screen lock (or similar) and set a PIN, Pattern or other Screen lock authentication mode. Once this is done the app should successfully complete the installation of the certificate (you will be prompted for the new Screen lock authentication details).

2

Once you have installed the certificate, configure eduroam with secure settings.

  • Open your Settings dialogue.
  • Select Wi-Fi.
  • Select eduroam.
  • A settings dialogue box should appear. Select the CA certificate list. The newly installed "University of Cambridge Wireless Root CA" should appear. Select it.
  • Note that if you are running Android 11 or later the option "Do not validate" under CA certificate (or similar) no longer appears. Whichever version of Android you are running we recommend that you enable certificate checking (these instructions guide you to do so) for the best security.
  • In the 'domain' field use "cam.ac.uk".
  • Complete the other options as described below:
  • Phase-2 Authentication is "MSCHAPV2".
  • Note that your username (identity) is the username of the network access token you created on the UIS token page for this device in the format CRSid+device@cam.ac.uk – for example, abc123+myphone@cam.ac.uk.
  • The Anonymous identity is "_token@cam.ac.uk".
  • The Password is the password for the network access token you created for this device.
  • Select Connect.

Your device should now connect to eduroam. Your password will be saved.

UIS Service Desk

UIS Service Status

Phone padded  Service status line: (01223 7)67999
Website  Sign up for SMS/email status alerts
Website  Read major IT incident reports

UIS bITe-size bulletin

A regular newsletter aimed at the University's IT community, highlighting service and project news from UIS.

Sign up >

Latest news

New digital certificate service launched

30 July 2021

We've launched a new digital certificate service, and are now onboarding institutions and IT staff. The new Jisc-based service enables IT staff to create and manage a broader range of certificates (TLS, client and code signing) in minutes and at no cost to their institution. Comparing the old and new certificate services...

Moodle maintenance Tuesday 3 August 07:00-09:00

28 July 2021

The Moodle service will be subject to interruption on Tuesday 3 August 07:00–09:00 due to essential maintenance. While Moodle is unavailable, users will not be able to log in to the Panopto cloud service. Panopto recordings can still be made offline for later upload. If you have any questions, please contact the Moodle...

Internet Explorer 11 will no longer be supported by Microsoft 365 apps and services from 17 August 2021

23 July 2021

Microsoft has announced that from 17 August 2021, all Microsoft 365 apps and services will no longer support Internet Explorer 11 (IE11). This follows Microsoft’s announcement last November that Microsoft Teams would no longer support IE11. After 17 August 2021, you'll have a degraded experience or will be unable to...