Indiana University
University Information Technology Services
  
What are archived documents?
Login>>
Login

Login is for authorized groups (e.g., UITS, OVPIT, and TCC) that need access to specialized Knowledge Base documents. Otherwise, simply use the Knowledge Base without logging in.

Close

IU Secure wireless connections: Windows

On this page:


Introduction


IU Secure is the wireless network for students, faculty, and staff to access on all campuses. IU Secure utilizes WPA2 Enterprise (Wi-Fi Protected Access) for authentication and encryption.

If you're visiting the university, use the IU Guest network; see About Network Access accounts (guest wireless access) at IUB, IUPUI, IUE, IUK, IUN, IUS, and IUPUC. If you're affiliated with Purdue, see Wireless access at Indiana University and Purdue University.

Note: To gain full Internet access for your device on the IU Secure network, you must register the device's MAC address. Before registering your MAC address, your device will be able to connect to IU Secure, but will not receive an IP address that allows a successful Internet connection. For more, see At IU, how do I register my computer or other networked device?

Back to top

Automatic configuration

To automatically configure your Windows computer to connect to IU Secure, use the IU Wireless Wizard from IUware. After completing the wizard, connect to IU Secure from your device's list of available wireless networks and, if prompted, log in using your IU Network ID username and passphrase.

Windows XP users must install Service Pack 3 before using this utility. Machines running XP Service Pack 2 will need to be manually configured.

If you instead wish to manually configure your computer to connect to IU Secure, follow the appropriate set of instructions below.

Back to top

Windows 8.x manual configuration

  1. From Desktop view, in the notification area, right-click the network connection icon and select Open Network and Sharing Center. Select Set up a new connection or network, and then Manually connect to a wireless network.

    Note: For help navigating, see Getting around in Windows.

  2. For the Network Name, enter IU Secure. For the Security Type, choose WPA2 Enterprise. Click OK.

  3. Select Next and choose Change connection settings.

  4. Click Change connection settings. Select the Security tab, and then click Settings... .

  5. Check Connect to these servers: and type net-auth-1.noc.iu.edu .

  6. Under "Trusted Root Certification Authorities:", select Thawte Premium Server CA and, if available, also select thawte Primary Root CA.

  7. From the drop-down menu under "Notifications before connecting:", select Don't ask user to authorize new servers or trusted CAs.

  8. Click OK twice and Close once to close all the windows.

  9. Click the network connections icon and select IU Secure. Then, select Connect.

  10. Enter your IU username and passphrase, and select OK.

  11. If you see "Windows can't verify the server's identity", simply select Connect.

Back to top

Windows 7 or Vista manual configuration

Note: To manually configure Windows Vista to connect to IU Secure, you first need to install the Microsoft Root Certificate Update.

The instructions below describe the complete manual process for configuring Windows 7 or Vista to access IU Secure. Use these instructions to pre-configure your computer before it's in range of the IU Secure network, or if the IU Wireless Wizard from IUware does not work.

Note: For help navigating, see Getting around in Windows.

  1. Before manually setting up the new connection to IU Secure, first check for and remove any existing connections:

    1. From the Start menu, select Control Panel. Go to Network and Sharing Center. Then, on the left, click Manage Wireless Networks.
    2. If IU Secure appears, highlight it and click Remove.

  2. While in the "Manage Wireless Networks" screen, click Add.

  3. Choose Manually create a network profile. In the dialog box that appears:

    1. For "Network name:", type IU Secure .
    2. For "Security type:", select WPA2-Enterprise.
    3. For "Encryption type:", select AES.
    4. The other options can generally be left alone.
    5. Click Next.

  4. Click Change connection settings. Select the Security tab, and then click Settings... .

  5. Check Connect to these servers: and type net-auth-1.noc.iu.edu .

  6. Under "Trusted Root Certification Authorities:", select Thawte Premium Server CA and, if available, also select thawte Primary Root CA.

  7. Check Do not prompt user to authorize new servers or trusted certification authorities.

  8. Click Configure... .

  9. Uncheck Automatically use my Windows logon name and password (and domain if any).

  10. Click OK three times to close all the windows.

When you select the IU Secure wireless network and click Connect, you will not be able to connect until you authenticate. Instead, a pop-up window will open (it may take a moment) telling you that additional information is required. Click the link in this window to open an authentication box. Type your username and password; in the "Logon domain:" field, enter ADS .

Note: Following the steps above will save your username and passphrase for all subsequent connections from your computer. If you do not want your authentication credentials saved (e.g., if you are logged into someone else's computer), clear your credentials from memory as follows:

  1. In the Control Panel, double-click Network and Sharing Center.

  2. On the left, click Manage wireless connections.

  3. Double-click the wireless network connection you just configured.

  4. Click the Security tab. In Windows 7, uncheck Remember my credentials for this connection each time I'm logged on. In Vista, uncheck Cache user information for subsequent connections to this network. Click OK.

  5. Refresh or disconnect the connection.

Back to top

Windows XP manual configuration

Important: As of April 8, 2014, Microsoft no longer supports Windows XP with security updates. To ensure the highest security standards, the UITS Support Center no longer registers Windows XP devices to the IU network. UITS strongly recommends that you look into the options for replacing or upgrading your Windows XP computers for full compatibility with IU systems. See About end of life for Windows XP.

To manually configure Windows XP to connect to IU Secure, you must have one of the following installed:

  • Windows XP Service Pack 3 (SP3)
  • Windows XP Wireless LAN API (available from Microsoft Support)

You also must install the Microsoft Root Certificate Update.

To configure Windows XP manually:

Note: For help navigating, see Getting around in Windows.

  1. From the Start menu, select Control Panel; alternatively, click Settings, and then Control Panel.

  2. Double-click the Network Connections icon. If instead you see Network and Internet Connections, click the link in the upper left labeled Switch to Classic View to see the correct Network Connections icon.

  3. Right-click the Wireless Network Connection icon and select Properties.

  4. Click the Wireless Networks tab, and then click Add... .

  5. On the Association tab, enter these settings:

    1. In the "Network name (SSID):" field, enter IU Secure .
    2. From the "Network Authentication:" drop-down menu, select WPA2.
    3. From the "Data encryption:" drop-down list, select AES.

  6. Select the Authentication tab, and then enter these settings:

    1. From the "EAP type:" drop-down list, select Protected EAP (PEAP).
    2. Uncheck Authenticate as computer when computer information is available.
    3. Verify that Authenticate as guest when user or computer information is unavailable is not selected.

  7. Under the "EAP type:" drop-down menu, click Properties. In the resulting Protected EAP dialog box, configure the following:

    1. Verify that Validate server certificate is selected.
    2. Select the Connect to these servers: box, and then enter net-auth-1.noc.iu.edu in the text box.
    3. In the "Trusted Root Certification Authorities" list, select Thawte Premium Server CA and, if available, also select thawte Primary Root CA.
    4. Select Do not prompt user to authorize new servers or trusted certification authorities.

  8. Verify that Secured password (EAP-MSCHAP v2) is selected for the authentication method, and then click Configure... .

  9. In the EAP MSCHAP v2 Properties dialog box, uncheck Automatically use my Windows logon name and password (and domain if any), and then click OK.

  10. Click OK to close the Protected EAP Properties dialog box.

  11. Click OK to close the Wireless network properties dialog box.

  12. Click OK to close the Wireless Network Connection Properties dialog box.

  13. Your system will attempt to connect to the IU Secure wireless network. You should see a message balloon near the notification area displaying the message:

    "Click here to select a certificate or other credentials for connection to the network IU Secure"

  14. Click the message balloon, and then enter your IU Network ID credentials in the authentication box. In the "Domain" field, enter ADS , and then click OK.

Back to top

Troubleshooting

Problems getting a wireless signal

Wireless coverage is widely available at IU. If you suspect you're not getting an adequate wireless signal, check the connection status. In Windows XP, in the Network Connections folder, double-click the Wireless Connection icon. The connection status information includes a signal strength meter.

If you are not getting an adequate wireless signal in an area that is supposed to have coverage, try verifying these wireless settings. These adjustments will not need to be made on machines running Windows 7 or Vista. To check your settings in Windows XP:

Note: For help navigating, see Getting around in Windows.

  1. From the Start menu, select Control Panel; alternatively, click Settings, and then Control Panel.

  2. If the screen prompts you to pick a category, click Network and Internet Connections, and then Network Connections. If it doesn't, double-click Network Connections.

  3. Right-click Wireless Network Connection and select Properties. Then, click the Wireless Networks tab.

  4. At the bottom right, click Advanced.

  5. Make sure the only option selected is Access point (infrastructure) networks only. If other options are selected, deselect them.

  6. Click Close, and then click OK.

If you have trouble connecting, but the signal strength is good, a different network configuration issue may be preventing communications. To resolve this issue, use standard TCP/IP troubleshooting techniques.

For help, see Microsoft Support.

If the signal strength is poor or no signal is received, try the steps below for configuring Windows XP without using Wireless Zero. If that does not resolve the issue, consult the manufacturer to determine if the wireless network adapter is working properly.

Back to top

Windows troubleshooting

  • Verify that the date and time are correctly set in the notification area.

  • Resetting TCP/IP and the Winsock Catalog:

    Occasionally, a computer caches network settings when switching access points or networks. To clear these settings, follow the steps below.

    To reset the Winsock Catalog:

    1. In Windows Vista or 7, click the Start menu. Type cmd and press the Enter key.

      In Windows XP, click the Start menu, and then click Run... . Type cmd and click OK.

    2. At the command prompt, enter netsh winsock reset .

    While still at the command prompt, to reset TCP/IP, enter:

    netsh int ip reset reset.txt

    Note: You will not get any "success" message from this command; you will return to the command prompt.

  • Driver problems:

    To troubleshoot driver problems:

    1. From the Start menu or desktop, right-click Computer or My Computer, and select Manage.

    2. Under "Computer Management", click Device Manager.

    3. In the right pane, double-click Other devices if possible. If the wireless network adapter is in this folder, the drivers for the network adapter have not been installed.

    4. Double-click Network adapters and see if a wireless network adapter is present.

      • If the wireless network adapter is present, double-click it. Under the General tab, confirm that the device is working properly. If it is not, you will see an error code under "Device Status". You can further troubleshoot the error by searching for the error code at Microsoft support.
      • If the wireless network adapter is not present under either Network adapters or Other devices, either the problem is with the device or the driver may not be installed.

  • Configuring Windows XP without using Wireless Zero Configuration:

    If you can view the properties for the Wireless Connection icon but you do not see a Wireless Networks tab, the network adapter driver does not fully support the Wireless Zero Configuration service; configure Windows XP to use the connection as follows:

    1. In the Network Connections folder, right-click Wireless Connection, and then select Properties.

    2. Click Configure. From the Advanced tab, configure your wireless network by using the available configuration options. The available options and option names may vary depending on the driver manufacturer:

      • Service-Set Identifier (SSID): At IU, this should be set to IU Secure.
      • Wireless Equivalent Protocol (WEP) or Encryption: Disable WEP.
      • Mode or Network Type: If you have an access point (e.g., you are at IU trying to connect to the IU network), set this option to Infrastructure. If you do not have an access point, and you are connecting computer to computer, set this option to Ad-Hoc.
      • Data Rate: Set this option to Auto or to 11 Mbps.
      • Power Save: For troubleshooting, set Power Save to Off or to Disabled. After the connection works properly, you can change this setting.

    After you configure these options, click OK to save the changes. Test to see if your connection works. If a red "X" is displayed over the connection icon in the Network Connections folder, or if you cannot connect:

    1. From the Start menu or the desktop, right-click Computer or My Computer, and select Manage.

    2. Double-click Services and Applications, and then click Services.

    3. In the details pane, right-click Wireless Zero Configuration, and select Properties.

    4. Under "Startup type", select Disabled, and then click OK.

    5. Close the Computer Management window, and then restart the computer.

    By disabling the Wireless Zero Configuration, you should be able to connect to the wireless network.

Back to top

This is document ayax in domain all.
Last modified on March 24, 2014.

I need help with a computing problem

  • Fill out this form to submit your issue to the UITS Support Center.
  • Please note that you must be affiliated with Indiana University to receive support.
  • All fields are required.



Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.

I have a comment for the Knowledge Base

  • Fill out this form to submit your comment to the IU Knowledge Base.
  • If you are affiliated with Indiana University and need help with a computing problem, please use the I need help with a computing problem section above, or contact your campus Support Center.