1. Introduction

The following instructions apply to using the Eduroam wireless service on Microsoft Windows 8 machines.

1. From the Metro start screen [Touch and hold] (or [Right Mouse Click]), select [All apps] and then select [Desktop] from the list.

   Figure 1a-RMBMetro.png [Screenshot of the Metro RMB Click]

   Figure 1b-AllAppsMetro.png [Screenshot of the Metro All Apps Menu]

2. From the Desktop Screen [Touch and hold] (or [Right Mouse Click]) on the wireless icon in the bottom right of the desktop and select [Open Network and Sharing Centre]

   Figure 2-RMB_WLAN.png [Screenshot of RMB Click of Networking System Tray Icon]

3. In the Network and Sharing centre, select [Setup a New Connection or Network]

   Figure 3-NetworkSharingCenter.png [Screenshot of Network and Sharing Center]

4. Select [Manually connect to a wireless network]

   Figure 4-ManuallyConnect.png [Screenshot of the Network creation options]

5. Now enter the following details as shown in the screenshot below:
   • Network Name is eduroam,
   • Security Type is WPA2-Enterprise,
   • Encryption Type is AES.
   Ensure the tick box [Start this connection automatically] contains a tick and then click Next

   Figure 5-EduroamManual.png [Screenshot of the manual configuration settings]

6. The next screen will say that the network has been configured. There are still more settings however, so select [Change Connection Settings]

   Figure 6-ManualChangeSettings.png [Screenshot of the configuration finished screen]

7. The inital screen should have the details filled in already so select the Security Tab and then next to the [Microsoft: Protected EAP (PEAP)] option, click on the Settings button.

   Figure 7-ManualSecurity1.png [Screenshot of the security settings tab]

8. In the Protected EAP Properties window:
   • Check the box that says Verify the server's identity by validating the certificate.
   • Check the box that says Connect to these servers(examples:srv1;srv2;.*\.srv3\.com):.
   • Enter radius0.oucs.ox.ac.uk;radius1.oucs.ox.ac.uk in the text Input box underneath the Connect to these servers(examples:srv1;srv2;.*\.srv3\.com): tick box.
   • In Trusted Root Certification Authorities list tick the box next to AddTrust External CA Root, usually at the top of the list.
   • From the drop down Menu entitled Notifications before connecting: select Don't ask user to authorize new servers or trusted CAs.
   • Ensure that Secured password (EAP-MSCHAP v2) is selected underneath the heading Secure Authentication Method
   • Check the box that says Enable Fast Reconnect
   • Now click on the Configure... button underneath the heading Secure Authentication Method

     Figure 8-PEAP.png [Screenshot of the PEAP MSCHAPv2 Coniguration]

   • In the EAP MSCHAPv2 Properties window ensure the check box Automatically use my Windows logon name and password (and domain if any). is UNCHECKED and click OK to both open windows to return to the Security Tab in step 7 of this guide.

     Figure 9-PEAP-MSCHAPv2.png [Screenshot of the PEAP MSCHAPv2 Coniguration]

9. From the Security tab on the eduroam Wireless Network Properties screen, click on the Advanced Settings button.

   Figure 10-EduroamAdvancedSettings.png [Screenshot of the Eduroam Advanced Settings Button]

10. On the Advanced Settings screen click on the 802.1X Settings tab (if not already selected) and, from the pull-down Menu select [User Authentication] then click on OK

    Figure 11-802.1x_Settings.png [802.1X Settings]

11. Select OK on each of the various dialogue boxes to close them.
12. Select Close to close the Manually connect to a wireless network screen.
13. Once near an eduroam access point, select the access point from the possible connections by clicking on the [Wireless Network Menu] via the [Desktop] or [Metro Screen] and selecting Eduroam
14. The first time you connect to the Eduroam Wireless Network you will receive a warning that reads: Windows can't verify the server's identity If you're in an area where you'd expect to find this network, it's probably safe to connect. Otherwise, this might be a different network with the same name. Show certificate details. If you're confident Eduroam is broadcast in your current area click on the Connect button (this will only happen the first time you connect):

    Figure 12-Connect.png [Screenshot of the information popup]

15. The next screen prompts you to authenticate yourself to allow the connection, your login details must be entered to achieve full network usage. Enter your Remote Access account username followed by @OX.AC.UK (here oucs1234@OX.AC.UK) and your Remote Access account password (Not your Single Sign-On one!).

    Figure 13-Login.png [Screenshot of the login prompt]

Users must abide by the user use agreement a copy of which is available at: http://www.admin.ox.ac.uk/statutes/regulations/196-052.shtml