Connecting to eduroam on Windows Laptops

WINDOWS 10

Choose eduroam from your list of discovered Wi-Fi networks and authenticate using your full NSCAD email address and password.

The first time you connect, you might get a Windows Security Alert warning that “The connection attempt could not be completed.” This is in reference to the security certificate issued by Harris-AD.nscad.ns.ca. “Harris-AD” is NSCAD’s authentication server. To ensure that your session is encrypted, you can click “view details” and then click Connect to proceed.

WINDOWS 7

Windows 7 requires some preliminary, manual network configuration before you can join secure Wi-Fi networks. This is not unique to the eduroam network.

• Go to Control Panel
• Select Network and Internet
• Select “View network status and tasks.”
• In the left-hand pane of the window that appears, select “Manage Wireless Networks”, then select the Add tab. The “Manually connect to a wireless network” wizard will appear. Select “Manually create a network profile.”

• In the “Network name” field, enter eduroam
• From the “Security type” drop-down list, select WPA2-Enterprise
• From the “Encryption type” drop-down list, select AES
• If you connect your computer to a wired connection at NSCAD, you might want to un-check “Start this connection automatically”
• Click the Next button

• Select “Change connection settings”

• In the Wireless Network Properties window, select the Security tab
• From the drop-down list to the right of “Security type”, select WPA2-Enterprise
• From the drop-down list to the right of “Encryption type”, select AES
• From the drop-down list below “Choose a network authentication method”, select “Microsoft: Protected EAP (PEAP)”. If you don’t want to have to enter your user name and password each time you connect, you can check the box beside “Remember my credentials for this connection each time I’m logged on”
• Select the Settings button to the right of “Microsoft: Protected EAP (PEAP)”

• Make sure “Validate server certificate” box is NOT checked
• Click the Configure button

• Un-check “Automatically use my Windows logon name and password”
• Click on OK

• Back in the main Security tab (see image 4 for reference), click/tap the Advanced settings button
• Choose the 802.1X tab
• Confirm the following settings:
⇒ “Specify authentication mode” is checked.
⇒ The drop-down list below “Specify authentication mode” shows “User authentication”.
⇒ “Enable single sign on for this network” is checked.
⇒ The radio button to the left of “Perform immediately after user logon” is selected.
⇒ The blank to the right of “Maximum delay (seconds):” shows 10.
⇒ “Allow additional dialogs to be displayed during single sign on” is checked.
⇒ “This network uses separate virtual LANs for machine and user authentication” is not checked.

• In the 802.11 tab, clear the box beside “Enable Pairwise Master Key caching” so that it is NOT checked
• Click/tap “OK” and you will end up back at the “Successfully added eduroam” window, at which point you can click on the “Close” button

• Down at the bottom of your Windows screen (the taskbar), you should see a prompt for additional information. Click on the balloon and a sign-in window will appear.

• Enter your full NSCAD email address and your password. Click OK and you should be connected to the wireless network in a few seconds.