Connect to the IU wireless network in Android OS

On this page:


Overview

Note:
eduroam is replacing IU Secure as the default wireless network for students, faculty, staff, and affiliates on all IU campuses; see Connect to eduroam. As of May 26, 2021, IU Secure is no longer available in the residence halls, and will fully retire on December 22, 2021.

Android devices must run Android 2.0 or later to connect to eduroam or IU Secure. However, first-generation Motorola Android phones that have recently been updated (2.2.1) may experience difficulties when attempting to connect to IU Secure.

  • eduroam:

    The simplest and most secure way to connect to eduroam is to use the Eduroam Network Setup Tool. Alternatively, you can use the instructions below to connect manually.

    To connect manually, select eduroam from the list of available wireless networks, and enter your full IU email address (for example, johndoe@iu.edu) and passphrase.

    Notes:
    • If you connect to eduroam at an institution other than an IU campus, you'll need to use the IU VPN to access some resources (such as remote desktop, library resources, and department drives).
    • For troubleshooting tips, see Troubleshoot your eduroam connection.
  • IU Secure: To connect, select IU Secure from the list of available wireless networks, and enter your IU username and passphrase.
Notes:
  • Android OS is an open source system that manufacturers can modify with little restriction on consistency. Consequently, the same functions and options may be presented differently depending on the make and model of your device, and the version (and even point version) of Android OS running on your device. The instructions below are accurate for most Android devices, but you may find a few minor inconsistencies depending on the particular device and Android OS build you are using.
  • UITS recommends that you specify a certificate authority (CA) certificate for the connection to provide an additional layer of security to your wireless device; for help, see Validating the connection below.

    During setup, depending on your Android version, you can select either Unspecified or Do Not Validate to set up your connection without a CA certificate.

Manually configure your device

Note:
Although UITS does not officially support Chrome OS, the Support Center has verified that these instructions work for Chrome OS, as well as Android OS.

To configure your connection to eduroam or IU Secure:

  1. From Settings, navigate to Network & Internet.
  2. Select Wi-Fi or Wireless.
  3. Select the network name (eduroam or IU Secure). If you don't see the network name listed:
    1. From the Home screen, press Menu. Tap Settings, then Network & Internet or Wireless & networks, and then Wi-Fi settings.
    2. Once in Wi-Fi settings, tap Add Network or Add Wi-Fi network.
    3. Type the network name (eduroam or IU Secure) as the name for this connection.
    4. Select eduroam or IU Secure again.
  4. If you are prompted to set or reset your credential storage password, tap Settings, and then either Location and Security or Security (typically on HTC devices with the Sense UI installed). For other devices, check your manufacturer's instructions for the location of these settings.
  5. Select the network name (eduroam or IU Secure) again and enter the following information:
    • EAP Method: PEAP (selected by default)
    • Phase 2 Authentication: MSCHAPV2
    • CA Certificate: UITS recommends specifying a certificate authority (CA) certificate for the connection to provide an additional layer of security to your wireless device; for help, see Validating the connection below.

      Optionally, depending on your Android version, you can select either Unspecified or Do Not Validate to set up your connection without specifying a CA certificate.

    • Client Certificate: Leave this field blank.
    • Identity: For eduroam, enter your primary IU email address. For IU Secure, enter your IU username; in some cases, you may need to enter ads\username (replace username with your IU username).
    • Anonymous Identity: Leave this field blank.
    • Wireless Password: Enter your IU passphrase.
  6. Tap Connect. (Even though you tap Connect rather than Save, the device will typically remember your settings.)
Important:
  • If you can't connect to the wireless network, make sure that you are using your primary IU email address (for eduroam) or your IU username (for IU Secure). UITS testing has revealed that invalid logins are a prime reason people have trouble connecting. If you suspect that you entered your information incorrectly, try forgetting and re-adding the network.
  • If you have difficulty connecting to IU Secure, try running the Eduroam Network Setup Tool to connect to eduroam.
  • If you have trouble connecting to eduroam, try running the Eduroam Network Setup Tool. If you've already done so, it will recreate your profile, overwriting the existing one.
  • When you try to connect for the first time, you may be prompted to accept a new security certificate. Verify that the certificate is issued by "InCommon RSA Certification Authority", and click OK or Connect. If you continue to experience issues, see About the IU wireless certificate for eduroam and IU Secure.
  • Be sure your device has the latest updates to its wireless software.
  • If your device does not support WPA2 Enterprise, you will be unable to connect.
  • For help, contact your campus Support Center.

Validate the connection

Validating your wireless connection adds an additional layer of security and ensures the authenticity of an IU Secure wireless access point. You can validate your connection by specifying a CA certificate.

To validate your wireless network connection, you'll need to download a CA certificate file to your Android device. Both eduroam and IU Secure authentication servers use USERTrust as their root certificate authority. You'll need a valid USERTrust primary root certificate in Privacy-Enhanced Mail (PEM) format to validate the connection. To download the certificate:

  1. On your Android device, tap https://iuware.iu.edu/Linux/Title/3614. You will need to log into IUware with your IU username and passphrase before the file will be available for downloaded.

  2. Once it downloads, open the certificate file (usertrust_rsa_certification_authority.cer) and enter the following information:
    • For "Certificate name", enter any name; this is only a label, so you can set it to anything (for example, USERTrust certificate).
    • For "Credential use", tap the drop-down menu and select Wi-Fi.
  3. To install the certificate file, tap OK.
    Note:

    If you aren't prompted to open and install the certificate after downloading it:

    1. From the Home screen, press Menu.
    2. Tap Settings, then Security, then Certificate Management, and then Install from storage.
    3. Tap the certificate file to install it. Be aware that you may also need to download the certificate file to the device's internal storage, and not an external memory card.

After you've installed the certificate, you can use it as the CA certificate option when setting up a connection. If you've already set up a connection, to add the CA certificate to it:

  1. If you're not already in Wi-Fi settings, from the Home screen, press Menu. Tap Settings, then Network & Internet or Wireless & networks, and then Wi-Fi settings.
  2. Once in Wi-Fi settings, tap and hold the network name, and then select Modify Network.
  3. Enter the following information:
    • EAP Method: PEAP (selected by default)
    • Phase 2 Authentication: MSCHAPV2
    • CA Certificate: Select the certificate you just installed.
    • Domain: Leave this field blank if your version of Android allows you to. If a domain is required, enter ads or ads.iu.edu.
      Note:
      For Google Pixel or devices running Android 11 or later, if a domain is required, use iu.edu instead.
    • Identity: For eduroam, enter your primary IU email address. For IU Secure, enter your IU username. (For Kindle Fire and Pixel, enter ads\username; replace username with your IU username.)
    • Anonymous Identity: Leave this field blank.
    • Wireless Password: Enter your IU passphrase.
  4. Tap Save.

This is document azle in the Knowledge Base.
Last modified on 2021-09-07 15:47:23.