Connecting to Eduroam via Microsoft Windows 8 with the built-in supplicant

1. Introduction

The following instructions apply to using the Eduroam wireless service on Microsoft Windows 8 machines.

1. From the Metro start screen [Touch and hold] (or [Right Mouse Click]), select [All apps] and then select [Desktop] from the list.
   
   
2. From the Desktop Screen [Touch and hold] (or [Right Mouse Click]) on the wireless icon in the bottom right of the desktop and select [Open Network and Sharing Centre]
   
3. In the Network and Sharing centre, select [Setup a New Connection or Network]
   
4. Select [Manually connect to a wireless network]
   
5. Now enter the following details as shown in the screenshot below:
   • Network Name is eduroam,
   • Security Type is WPA2-Enterprise,
   • Encryption Type is AES.
   Ensure the tick box [Start this connection automatically] contains a tick and then click Next
   
6. The next screen will say that the network has been configured. There are still more settings however, so select [Change Connection Settings]
   
7. The inital screen should have the details filled in already so select the Security Tab and then next to the [Microsoft: Protected EAP (PEAP)] option, click on the Settings button.
   
8. In the Protected EAP Properties window:
   • Check the box that says Verify the server's identity by validating the certificate.
   • Check the box that says Connect to these servers(examples:srv1;srv2;.*\.srv3\.com):.
   • Enter radius0.oucs.ox.ac.uk;radius1.oucs.ox.ac.uk in the text Input box underneath the Connect to these servers(examples:srv1;srv2;.*\.srv3\.com): tick box.
   • In Trusted Root Certification Authorities list tick the box next to AddTrust External CA Root, usually at the top of the list.
   • From the drop down Menu entitled Notifications before connecting: select Don't ask user to authorize new servers or trusted CAs.
   • Ensure that Secured password (EAP-MSCHAP v2) is selected underneath the heading Secure Authentication Method
   • Check the box that says Enable Fast Reconnect
   • Now click on the Configure... button underneath the heading Secure Authentication Method
     
   • In the EAP MSCHAPv2 Properties window ensure the check box Automatically use my Windows logon name and password (and domain if any). is UNCHECKED and click OK to both open windows to return to the Security Tab in step 7 of this guide.
     
9. From the Security tab on the eduroam Wireless Network Properties screen, click on the Advanced Settings button.
   
10. On the Advanced Settings screen click on the 802.1X Settings tab (if not already selected) and, from the pull-down Menu select [User Authentication] then click on OK
    
11. Select OK on each of the various dialogue boxes to close them.
12. Select Close to close the Manually connect to a wireless network screen.
13. Once near an eduroam access point, select the access point from the possible connections by clicking on the [Wireless Network Menu] via the [Desktop] or [Metro Screen] and selecting Eduroam
14. The first time you connect to the Eduroam Wireless Network you will receive a warning that reads: Windows can't verify the server's identity If you're in an area where you'd expect to find this network, it's probably safe to connect. Otherwise, this might be a different network with the same name. Show certificate details. If you're confident Eduroam is broadcast in your current area click on the Connect button (this will only happen the first time you connect):
    
15. The next screen prompts you to authenticate yourself to allow the connection, your login details must be entered to achieve full network usage. Enter your Remote Access account username followed by @OX.AC.UK (here oucs1234@OX.AC.UK) and your Remote Access account password (Not your Single Sign-On one!).
    

Users must abide by the user use agreement a copy of which is available at: http://www.admin.ox.ac.uk/statutes/regulations/196-052.shtml

Up: Contents