skip to content

IT Help and Support

University Information Services

How to manually configure eduroam on an Android device

We recommend that you manually configure eduroam on an Android device only if you're unable to use the eduroam CAT tool - note that Android 11 may not work with the eduroam CAT, an alternative app is available from Play Store called "geteduroam" (remove existing eduroam configuration first).

Manually configuring eduroam on Android devices can be complicated and prone to error because of the variations between different versions of Android. The 'eduroam CAT' app simplifies this process, and we recommend using it wherever possible (Android version 10 and lower, it may fail for some Android 11 devices). However, if for some reason this process fails, then you can follow the manual instructions below.

Before you begin, make sure:

  • you're in a location where the eduroam wireless network is available
  • you have created a network access token for this device on the UIS token page.
  • you have removed existing eduroam configuration first by forgetting the eduroam wireless network settings (if you have any).

These instructions were written using a OnePlus 5T running Android 8.



Important notes for devices running Android 11

From version 11 onwards the identity certificate presented by an authentication server (such as that used on eduroam) must be validated by your device. In previous versions it was possible to select "Do not validate" or similar in the eduroam settings (this is a security risk), this is no longer possible.

If you have set your eduroam connection up without certificate validation then you will find that you are unable to connect once upgraded to Android 11. You will need to 'forget' and reconfigure your eduroam settings.

We believe that the "eduroam CAT" may not work for all Android 11 devices, there is a new app called "geteduroam" (we will be fully documenting this when we have been able to test it). We recommend trying the new "geteduroam" app (which should be similar in process to the eduroam CAT) or if this doesn't work for you then please use the instructions below to manually configure your eduroam connection. Always remove existing configuration before attempting a new method (go to your wireless networks and 'forget' eduroam).



Download and install the University of Cambridge CA Root certificate.

  • Before you start, remove any current configuration for eduroam. Go to Settings then Wi-Fi. Press and hold on eduroam. If the option to Forget network or similar appears, then select it and continue. If the option to 'Forget network' does not appear you can still continue.
  • Make sure you are connected to the internet (for example, via a mobile network or by connecting to the University's UniOfCam Wi-Fi network.
  • Download the University of Cambridge Wireless Service Root CA.
  • Your device will ask you if you want to download the certificate (wireless-ca.crt). Choose 'Download'.
  • At this point, differences in Android versions may become apparent. The next prompt will ask you how you want to open the certificate file. Select Open with Certificate Installer (or your preferred app).

Certificate Install notification screen

  • You will then be prompted to Name the certificate and identify how it should be used. In the Certificate name field type "University of Cambridge Wireless Root CA" and choose Wi-Fi from the dropdown list for Credential use.

Certificate naming screen


  • If at this point the certificate import fails, you can complete the process manually. Go to SettingsSecurity & lock screenCredential storage and select Install from storage (or equivalent menu options). From your Downloads folder, select the wireless-ca.crt certificate file. Complete the installation steps as instructed.
  • If at this stage you receive an error saying that a Screen lock is required then you will need to set one (even if only temporarily while completing this process) - go to Settings -> Security -> Screen lock (or similar) and set a PIN, Pattern or other Screen lock authentication mode. Once this is done the app should successfully complete the installation of the certificate (you will be prompted for the new Screen lock authentication details).


Once you have installed the certificate, configure eduroam with secure settings.

  • Open your Settings dialogue.
  • Select Wi-Fi.
  • Select eduroam.
  • A settings dialogue box should appear. Select the CA certificate list. The newly installed "University of Cambridge Wireless Root CA" should appear. Select it.
  • Note that if you are running Android 11 or later the option "Do not validate" under CA certificate (or similar) no longer appears. Whichever version of Android you are running we recommend that you enable certificate checking (these instructions guide you to do so) for the best security.
  • In the 'domain' field use "".
  • Complete the other options as described below:
  • Phase-2 Authentication is "MSCHAPV2".
  • Note that your username (identity) is the username of the network access token you created on the UIS token page for this device in the format – for example,
  • The Anonymous identity is "".
  • The Password is the password for the network access token you created for this device.
  • Select Connect.

Your device should now connect to eduroam. Your password will be saved.

UIS Service Desk

Phone padded  Service status line: (01223 7)67999
Website  Sign up for SMS/email status alerts
Website  Read major IT incident reports

UIS bITe-size bulletin

A regular newsletter aimed at the University's IT community, highlighting service and project news from UIS.

Sign up >

Latest news

DS-Print: Common Balance temporarily enabled with £20 overdraft

3 October 2022

On 28 September, we withdrew eCredit for DS-Print whilst we investigated reports of users being unable to access the eCredit web portal to purchase Common Balance print credit. As a temporary measure, while a fix is implemented for eCredit in order to resolve these issues, we have enabled all users with a £20 overdraft on...

macOS Ventura release

30 September 2022

Apple will soon be releasing macOS Ventura. Following its release, they will drop support for macOS Catalina (10.15). All users running macOS Catalina are encouraged to upgrade to one of the following supported operating systems: macOS Ventura (when released) macOS 12 Monterey (compatible computers:

Change to display names in Lookup from 06 October 

30 September 2022

What is happening From 06 October, UIS will be updating the Display name records in Lookup to use people’s Preferred first name initials. This supports a user-friendly move toward using everyone’s preferred names, rather than their Registered name. If you have personally set your own Display name in Lookup, you will not be...