Skip to Knowledge Base content

Windows & Surface Pro Wireless Setup

Get Connected | Troubleshooting | Remove Eduroam

Network Requirements

  • An administrative account with permissions to install software. 
  • Antivirus software running real time protection must be installed. (Microsoft Security Essentials is recommended).
  • Patching must be enabled.
  • ClearPass OnGuard must be installed and running. This will be installed when configuring for eduroam.
    • ClearPass OnGuard confirms antivirus and patching are setup correctly. More information can be found at www.csuchico.edu/nac.

Getting Connected to Eduroam

1. Connect to the "csuchico" wireless network.

2. Open a web browser (i.e. Safari, Chrome, Firefox) and navigate to any website, it should redirect you to the page below (If not, enter the URL www.csuchico.edu/eduroam and proceed to step 4).

3. Select "SET ME UP". 

Eduroam information page with link for set up.

4. Confirm the correct operating system has been chosen and select "Join Now" or use the drop down menu and select the correct operating system. NOTE: Surface Pro's will use the Windows 8.1 installer.

Eduroam configuration page for Windows 7 with link to installer download. Installer is automatically chosen based on users operating system. Eduroam configuration page for Windows 8.1 with link to installer download. Installer is automatically chosen based on users operating system. Eduroam configuration page for Windows 10 with link to installer download. Installer is automatically chosen based on users operating system.

5. You should seeing a "Loading" page, followed by the prompt seen in Step 6. You may have to manually download the installer by clicking on "here".

Alert box "If you see Missing or Inactive Plug-in message below, click link below to download installer manually".Right clicking Secure W2 Join Now installer and selecting "Open".

6. The installer is now running. Enter your Chico State credentials and select "Next".

Secure W2 prompt asking for user credentials and then selecting "Next".

7. Next it will install ClearPass OnGuard. Select "Install".

ClearPass OnGuard Setup and selecting "Install".

8. When the install completes select "Finish".

ClearPass OnGuard Setup and selecting "Finish".

9. The eduroam installer will now be complete. Select "Done".

Eduroam successfully joined.

10. The ClearPass OnGuard application will require a login the first time it runs. Enter your Chico State credentials and select "OK".

Login to ClearPass with User credentials.

You should now be connected to the eduroam network with internet access.

 

Removing eduroam 

1. Open the "Add or Remove Programs" window via control panel (or by searching for it).

Open "Add or remove programs".

2. Select the "SecureW2 Enterprise Client" program and select "Uninstall".

Add or remove programs menu selecting "Secure W2 Enterprise Client" and then "Uninstall/Change".

3. After a few moments it should disappear, and the network configuration for eduroam will be removed.

 

Troubleshooting

SecureW2 Settings (Method 1) | Manual Configuration without SecureW2 (Method 2

SecureW2 Settings (Method 1)

1. Open the SecureW2 appliction. Left click the arrow in the bottom right corner. Right click the SecureW2 Icon and select "Configuration manager"

Opening the SecureW2 Configuration manager

2. Confirm the Profile "DEFAULT" is shown and select "Configure".

SecureW2 configuration for the default profile.

3. The "Connection" tab should have "Use alternate outer identity" selected and the radio button "Specify outer identity" selected with "anonymous@csuchio.edu" in the box. Make these changes if not.

SecureW2 Connection tab with identity information listed.

4. Open the "Certificates" tab.

  • Confirm the "Verify server certificate" is selected with "AddTrust External CA Root" and "InCommon Server CA" are added. 
  • Confirm the "Verify server name:" box is checked with "chi-cppm-vip.csuchico.edu" in the box.
  • Select the "Advanced" button.

SecureW2 certificates window verifying configuration settings

5. Confirm the four check boxes are selected and select "OK".

  • "Bypass balloon notification"
  • "Force SecureW2 user interface"
  • "Always save user credentials"
  • "Hide domain"

SecureW2 Advanced screen confirming settings.

6. Select "OK" to save all the settings to exit the configuration manager.

7. Connect to the eduroam network again. It may request username and password again.

 

Manual Configuration without SecureW2 (Method 2)

1. Review the available networks. Right click the eduroam network and select "Forget this network".

Forget the eduroam network settings.

2. Right click the wifi symbol in the bottom corner and select "Open Network and Sharing Center".

Open the Network and Sharing Center

3. Select "Setup a new connection or network".

Setting up a new connection or network

4. Select "Manually connect to a wireless network".

Select manually connect to a wireless network.

5. Enter and select the following settings:

  • Enter "eduroam" in the "Network name:"
  • Select "WPA2-Enterprise" for "Security type:"
  • Confirm "AES" is selected as the "Encryption type:.
  • Confirm the box is checked for "Start this connection automatically".
  • Select "Next".

Enter wireless network information

6. In the next Window it should have successfully added eduroam. Select "Change connection settings".

Succefully added eduroam. Changing connection settings.

7. Confirm the box is checked for "Connect automatically when this network is in range" and Select the "Security" tab.

Connection tab for wireless network properties.

8. Select "Microsoft:EAP-TTLS" under "Choose a network authentication method:" and then select "Settings".

  • Note that this setting may not be here depending on your hardware.  If not, select the "SecureW2 and see step two in the previous method.

Security tab for wireless properties.

9. Enter and confirm the following settings:

  • Confirm the box is checked for "Enable identity privacy" and enter "anonymous@csuchico.edu".
  • Under "Server certificate validation" enter "chi-cppm-vip.csuchico.edu".
  • Under "Trusted Root Certification Authorities" select  "USERTrust RSA Certification Authority"and "AddTrust External CA Root" confirm the box is checked for "Don't prompt user if unable to authorize server".
  • Confirm "Unencrypted password (PAP)" is selected under "Select a non-EAP method for authentication".
  • Select "OK" on this screen and  "OK" on the previous screen to complete the setup.

TTLS properties to finish wireless configuration.Add Trust External CA Root

10. Connect to the eduroam network if not already, enter credentials if prompted.

* If issues occur, you may need to add "@csuchico.edu" to the end of your username. Example: jdoe@csuchico.edu

 

Feedback

Please do not leave the comment section blank! Provide constructive feedback to make this page better. Further inquiries can be forwarded to ITSS in Meriam Library 142, or via phone (530)898-4357.

Was this helpful?
0% helpful - 1 review

Details

Article ID: 7685
Created
Thu 7/16/15 2:24 PM
Modified
Tue 3/28/17 9:25 AM

Files (1)