skip to content

IT Help and Support

University Information Services

How to manually configure eduroam on an Android device

We recommend that you manually configure eduroam on an Android device only if you're unable to use the eduroam CAT tool - note that Android 11 may not work with the eduroam CAT, an alternative app is available from Play Store called "geteduroam" (remove existing eduroam configuration first).

Manually configuring eduroam on Android devices can be complicated and prone to error because of the variations between different versions of Android. The 'eduroam CAT' app simplifies this process, and we recommend using it wherever possible (Android version 10 and lower, it may fail for some Android 11 devices). However, if for some reason this process fails, then you can follow the manual instructions below.

Before you begin, make sure:

  • you're in a location where the eduroam wireless network is available
  • you have created a network access token for this device on the UIS token page.
  • you have removed existing eduroam configuration first by forgetting the eduroam wireless network settings (if you have any).

These instructions were written using a OnePlus 5T running Android 8.



Important notes for devices running Android 11

From version 11 onwards the identity certificate presented by an authentication server (such as that used on eduroam) must be validated by your device. In previous versions it was possible to select "Do not validate" or similar in the eduroam settings (this is a security risk), this is no longer possible.

If you have set your eduroam connection up without certificate validation then you will find that you are unable to connect once upgraded to Android 11. You will need to 'forget' and reconfigure your eduroam settings.

We believe that the "eduroam CAT" may not work for all Android 11 devices, there is a new app called "geteduroam" (we will be fully documenting this when we have been able to test it). We recommend trying the new "geteduroam" app (which should be similar in process to the eduroam CAT) or if this doesn't work for you then please use the instructions below to manually configure your eduroam connection. Always remove existing configuration before attempting a new method (go to your wireless networks and 'forget' eduroam).



Download and install the University of Cambridge CA Root certificate.

  • Before you start, remove any current configuration for eduroam. Go to Settings then Wi-Fi. Press and hold on eduroam. If the option to Forget network or similar appears, then select it and continue. If the option to 'Forget network' does not appear you can still continue.
  • Make sure you are connected to the internet (for example, via a mobile network or by connecting to the University's UniOfCam Wi-Fi network.
  • Download the University of Cambridge Wireless Service Root CA.
  • Your device will ask you if you want to download the certificate (wireless-ca.crt). Choose 'Download'.
  • At this point, differences in Android versions may become apparent. The next prompt will ask you how you want to open the certificate file. Select Open with Certificate Installer (or your preferred app).

Certificate Install notification screen

  • You will then be prompted to Name the certificate and identify how it should be used. In the Certificate name field type "University of Cambridge Wireless Root CA" and choose Wi-Fi from the dropdown list for Credential use.

Certificate naming screen


  • If at this point the certificate import fails, you can complete the process manually. Go to SettingsSecurity & lock screenCredential storage and select Install from storage (or equivalent menu options). From your Downloads folder, select the wireless-ca.crt certificate file. Complete the installation steps as instructed.
  • If at this stage you receive an error saying that a Screen lock is required then you will need to set one (even if only temporarily while completing this process) - go to Settings -> Security -> Screen lock (or similar) and set a PIN, Pattern or other Screen lock authentication mode. Once this is done the app should successfully complete the installation of the certificate (you will be prompted for the new Screen lock authentication details).


Once you have installed the certificate, configure eduroam with secure settings.

  • Open your Settings dialogue.
  • Select Wi-Fi.
  • Select eduroam.
  • A settings dialogue box should appear. Select the CA certificate list. The newly installed "University of Cambridge Wireless Root CA" should appear. Select it.
  • Note that if you are running Android 11 or later the option "Do not validate" under CA certificate (or similar) no longer appears. Whichever version of Android you are running we recommend that you enable certificate checking (these instructions guide you to do so) for the best security.
  • In the 'domain' field use "".
  • Complete the other options as described below:
  • Phase-2 Authentication is "MSCHAPV2".
  • Note that your username (identity) is the username of the network access token you created on the UIS token page for this device in the format – for example,
  • The Anonymous identity is "".
  • The Password is the password for the network access token you created for this device.
  • Select Connect.

Your device should now connect to eduroam. Your password will be saved.

UIS Service Desk

Phone padded  Service status line: (01223 7)67999
Website  Sign up for SMS/email status alerts
Website  Read major IT incident reports

UIS bITe-size bulletin

A regular newsletter aimed at the University's IT community, highlighting service and project news from UIS.

Sign up >

Latest news

Change to Raven login screen from Tuesday 14 February

26 January 2023

New login screen for current University members The login screen for Raven-protected websites and applications will change from Tuesday 14 February for current members of the University. It will become the same screen most of you are already familiar with from logging in to your University Microsoft account to access, for...

Changes to Microsoft Stream video sharing from Tues 07 Feb

26 January 2023

26 January 2023 What’s happening UIS is disabling uploads to Microsoft Stream (Classic), the old version of the video sharing app, on Tuesday 07 February. The new version is called Stream (on SharePoint). Teams meeting recordings are already being automatically saved to Stream (on SharePoint). More information: Stream (on...

Institutional File Storage (IFS) service release new features to Self-Service Gateway

18 January 2023

18 January 2023 Several new features are now live on the Self-Service Gateway run by the Institutional File Storage (IFS) service. IFS is a service for institutions to store and share everyday documents with colleagues. IFS Data Owners and Data Managers can use the Self-Service Gateway  portal to buy and administer storage...