As an IU user, how can I connect to eduroam at another institution?

The eduroam (education roaming) service, developed for the international research and education community, is a secure, worldwide wireless network access system that allows students, faculty, and staff from participating institutions (including all IU campuses) to access the Internet when visiting other participating institutions. With eduroam, you can connect to the network at other member institutions using your IU credentials.

See About eduroam at Indiana University.

Note:
When you log into eduroam from another institution, your passphrase remains secure, and is never sent over the network.

On this page:


Finding eduroam providers

You can find lists of current eduroam service providers at the regional websites:

Back to top

Automatic configuration

To automatically configure your computer to connect to eduroam, use the online Configuration Assistant Tool (available for Windows, OS X, iOS, and Linux).

Manual configuration

If you instead wish to manually configure your computer to connect to eduroam, follow the appropriate set of instructions below.

Windows 10 or 8.x

The first time you connect to the eduroam wireless network, to configure Windows 10 or 8.x:

  1. From Desktop view, in the notification area, right-click the network connection icon and select Open Network and Sharing Center. Select Set up a new connection or network, and then choose Manually connect to a wireless network.
    Note:
    For help navigating, see Getting around in Windows.
  2. For the Network Name, enter eduroam. For the Security Type, choose WPA2 Enterprise. Click OK.
  3. Select Next and choose Change connection settings.
  4. Click Change connection settings. Select the Security tab, and then click Settings....
  5. Check Connect to these servers: and type secure-iu-wireless.cni.iu.edu.

  6. Under "Trusted Root Certification Authorities:", select USERTrust RSA Certification Authority.

  7. Click OK.
  8. While in the "Wireless Network Properties" screen, click Advanced Settings.
  9. Check Specify Authentication Mode. Leave the default settings as is.
  10. Click OK twice to close all the windows.
  11. Click the network connections icon, select eduroam, and then select Connect.
  12. Enter your full IU email address as the username (see At IU, what is my email address?) and your IU passphrase in the password field, and select OK.
  13. If you see "Windows can't verify the server's identity", select Connect.

Windows 7

The first time you connect to the eduroam wireless network, to configure Windows 7:

Note:
For help navigating, see Getting around in Windows.
  1. From the Start menu, open the Control Panel.
  2. Click Network and Sharing Center, and then click Connect to a network.
  3. From the menu, double-click eduroam.

    If prompted, select Enter/select additional logon information. Enter your full IU email address as your username (see At IU, what is my email address?), and enter your Network ID passphrase. For the logon domain, use ADS. Click OK.

  4. You will probably return to the "Connect to a network" screen. Click Enter/select additional logon information again.
  5. In the "Validate Server Certificate" window, under "Root Certificate Authority", select USERTrust RSA Certification Authority, and then click OK.

  6. In the "Connect to the Internet" window, you now have the option to save your login credentials so you will not have to provide them every time. To save them, click Close.

If you cannot connect after following the steps above, see the instructions below for pre-configuring your computer.

Note:

Following the steps above will save your username and passphrase for all subsequent connections from your computer. If you do not want your authentication credentials saved, clear your credentials from memory as follows:

  1. In the Control Panel, double-click Network and Sharing Center.
  2. On the left, click Manage wireless connections.
  3. Double-click the wireless network connection you just configured.
  4. Click the Security tab. In Windows 7, uncheck Remember my credentials for this connection each time I'm logged on. Click OK.
  5. Refresh or disconnect the connection.

Pre-configuring Windows 7

Use these instructions to pre-configure your computer before it's in range of the eduroam network, or if for some reason the process above does not work when you are in range of the network.

  1. Before manually setting up the new connection to eduroam, first check for and remove any existing connections:
    1. From the Start menu, select Control Panel. Go to Network and Sharing Center. Then, on the left, click Manage Wireless Networks.
    2. If eduroam appears, highlight it and click Remove.
  2. While in the "Manage Wireless Networks" screen, click Add.
  3. Choose Manually create a network profile. In the dialog box that appears:
    1. For "Network name:", type eduroam.
    2. For "Security type:", select WPA2-Enterprise.
    3. For "Encryption type:", select AES.
    4. The other options can generally be left alone.
    5. Click Next.
  4. Click Change connection settings. Then select the Security tab and click Settings....
  5. Check Connect to these servers: and type secure-iu-wireless.cni.iu.edu.

  6. Under "Trusted Root Certification Authorities:", select Thawte Primary Root CA.
  7. Check Do not prompt user to authorize new servers or trusted certification authorities.
  8. Click Configure....
  9. Uncheck Automatically use my Windows logon name and password (and domain if any).
  10. Click OK twice.
  11. On the "Wireless Network Properties" screen, click Advanced Settings.
  12. Check Specify authentication mode. Leave the default settings.
  13. Click OK twice to close all the windows.

When you select the eduroam wireless network and click Connect, you will not be able to connect until you authenticate. Instead, a pop-up window will open (it may take a moment) telling you that additional information is required. Click the link in this window to open an authentication box. Type your full IU email address as your username, and enter your Network ID passphrase. In the "Logon domain:" field, enter ADS, and then click OK.

Mac OS X

  1. From the AirPort menu, select eduroam.
  2. When prompted, enter your full IU email address as your username (see At IU, what is my email address?), and enter your Network ID passphrase. Click Join.
  3. When prompted to verify the certificate, click Show Certificate and verify that:
    • The certificate is signed by "Thawte Primary Root CA".
    • The certificate name is secure-iu-wireless.cni.iu.edu.

  4. Check Always trust "secure-iu-wireless.cni.iu.edu" and click Continue.

  5. You should now be connected to the eduroam SSID; if you are prompted for your credentials again, enter your full IU email address and passphrase as above (see At IU, what is my email address?).

Connecting with other devices

When on an eduroam service provider campus, connect to the "eduroam" SSID. For your username, enter your full IU email address in the form username@campus.edu (see At IU, what is my email address?). For your password, enter your IU Network ID passphrase.

If you are prompted to accept any security certificates, verify that:

  • The certificate is signed by "USERTrust RSA Certification Authority".
  • The certificate name is secure-iu-wireless.cni.iu.edu.

This is document bcdx in the Knowledge Base.
Last modified on 2017-08-15 10:15:06.

  • Fill out this form to submit your issue to the UITS Support Center.
  • Please note that you must be affiliated with Indiana University to receive support.
  • All fields are required.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.

  • Fill out this form to submit your comment to the IU Knowledge Base.
  • If you are affiliated with Indiana University and need help with a computing problem, please use the I need help with a computing problem section above, or contact your campus Support Center.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.