IU Secure wireless connections: Android OS

IU Secure is the wireless network for students, faculty, and staff to access on all campuses. IU Secure uses WPA2 Enterprise (Wi-Fi Protected Access) for authentication and encryption.

Important:
  • If you can't connect to the IU Secure wireless network, make sure your IU username and passphrase are correct when you attempt to log in. UITS testing has revealed that invalid logins are a prime reason people have trouble connecting.
  • When you try to connect to IU Secure for the first time, you may be prompted to accept a new security certificate. Verify that the certificate is issued by "USERTrust RSA Certification Authority", and click OK or Connect. If you continue to experience issues, see About the IU Secure wireless certificate.

    For help, contact your campus Support Center.

Android devices must run Android 2.0 or later to connect to IU Secure. However, first-generation Motorola Android phones that have recently been updated (2.2.1) may experience difficulties when attempting to connect to IU Secure.

Note:

UITS recommends that you specify a certificate authority (CA) certificate for IU Secure connections to provide an additional layer of security to your wireless device; for help, see Validating the connection below.

Optionally, depending on your Android version, you can select either Unspecified or Do Not Validate to set up your connection without a CA certificate.

On this page:


Automatic configuration

Although UITS does not officially support Chrome OS, the Support Center has verified that these instructions work for Chrome OS, as well as Android OS.

  1. From Settings, navigate to Wi-Fi or Wireless.
  2. Select IU Secure.

    If you don't see IU Secure listed, see the manual configuration instructions.

  3. If you are prompted to set or reset your credential storage password, tap Settings, and then either Location and Security or Security (typically on HTC devices with the Sense UI installed). For other devices, check your manufacturer's instructions for the location of these settings.
  4. Select IU Secure again and enter the following information:
    • EAP Method: PEAP (selected by default)
    • Phase 2 Authentication: MSCHAPV2
    • CA Certificate: UITS recommends specifying a certificate authority (CA) certificate for IU Secure connections to provide an additional layer of security to your wireless device; for help, see Validating the connection below.
    • Optionally, depending on your Android version, you can select either Unspecified or Do Not Validate to set up your connection without specifying a CA certificate.

    • Client Certificate: Leave this field blank.
    • Identity: Enter your IU username; in some cases, you may need to enter ads\username.
    • Anonymous Identity: Leave this field blank.
    • Wireless Password: Enter your IU passphrase.
  5. Tap Connect. (Even though you tap Connect rather than Save, the device will typically remember your settings.)

To watch a video that shows you how to set up your device for use on IU Secure, see How to Connect to IU Secure with Android and iOS on the UITS YouTube channel.

Manual configuration

You can manually set up the option for IU Secure as follows:

  1. If you're not already in Wi-Fi settings, from the Home screen, press Menu. Tap Settings, then Wireless & networks, and then Wi-Fi settings.
  2. Once in Wi-Fi settings, tap Add Wi-Fi network.
  3. Type IU Secure as the name for this connection.
  4. Tap Save, and then proceed as described in steps 4-5 above.

Validating the connection

Validating your IU Secure wireless connection adds an additional layer of security and ensures the authenticity of an IU Secure wireless access point. You can validate your connection by specifying a CA certificate.

To validate your IU Secure connection, you'll need to download a CA certificate file to your Android device. IU Secure authentication servers use USERTrust as their root certificate authority. You'll need a valid USERTrust primary root certificate in Privacy-Enhanced Mail (PEM) format to validate the IU Secure connection. To download the certificate:

  1. On your Android device, tap http://www.iu.edu/~scfl/security/usertrust_rsa_certification_authority.cer.

  2. Once it downloads, open the certificate file (usertrust_rsa_certification_authority.cer) and enter the following information:
    • For "Certificate name", enter any name; this is only a label, so you can set it to anything (e.g., IU Secure).
    • For "Credential use", tap the drop-down menu and select Wi-Fi.
  3. To install the certificate file, tap OK.
    Note:

    If you aren't prompted to open and install the certificate after downloading it:

    1. From the Home screen, press Menu.
    2. Tap Settings, then Security, then Certificate Management, and then Install from storage.
    3. Tap the certificate file to install it. Be aware that you may also need to download the certificate file to the device's internal storage, and not an external memory card.

After you've installed the certificate, you can use it as the CA certificate option when setting up an IU Secure connection. If you’ve already set up an IU Secure connection, to add the CA certificate to your connection:

  1. If you're not already in Wi-Fi settings, from the Home screen, press Menu. Tap Settings, then Wireless & networks, and then Wi-Fi settings.
  2. Once in Wi-Fi settings, tap hold IU Secure, and then select Modify Network.
  3. Enter the following information:
    • EAP Method: PEAP (selected by default)
    • Phase 2 Authentication: MSCHAPV2
    • CA Certificate: Select the certificate you just installed.
    • Domain: Leave this field blank.
    • Identity: Enter IU username. (For Kindle Fire and Pixel, enter ads\username.)
    • Anonymous Identity: Leave this field blank.
    • Wireless Password: Enter your IU passphrase.
  4. Tap Save.

This is document azle in the Knowledge Base.
Last modified on 2017-10-09 16:38:59.

  • Fill out this form to submit your issue to the UITS Support Center.
  • Please note that you must be affiliated with Indiana University to receive support.
  • All fields are required.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.

  • Fill out this form to submit your comment to the IU Knowledge Base.
  • If you are affiliated with Indiana University and need help with a computing problem, please use the I need help with a computing problem section above, or contact your campus Support Center.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.