IT Connect
Your connection to information technology at the UW

Eduroam FAQ

Due to changes to the eduroam Wi-Fi service as of 05/01/20, users are required to re-onboard their devices. Please visit our Eduroam Onboarding Guide for step-by-step instructions or click onboard.wifi.uw.edu to onboard right away.

Does the UW have access to eduroam?

Yes, the UW is a participating member of eduroam. This means:

  • UW faculty, staff and students visiting other eduroam participating institutions can access eduroam using their UW NetID credentials.
  • Visitors from other eduroam enabled institutes can access the eduroam network  at UW for secure wireless access to the Internet.

The eduroam SSID will show up in your wireless connections on your mobile device or laptop.

What does eduroam cost?

Eduroam is a free service provided by an international federation of academic institutions for all members of the worldwide research and education community.

How does eduroam work when I am away from campus?

Eduroam works by sending your device certificate through a ‘tunnel’ back to the UW to be authenticated. Once your certificate has been verified by UW, that information is returned to the institution you are visiting so you can access the eduroam wireless network.

For example, if you were visiting the University of Oregon, your device would automatically log in to the eduroam wireless network using your devices certificate. This certificate is sent to the UW’s identity management systems to be authorized, and a message is sent back to the University of Oregon advising that your certificate is authorized and you are allowed access to eduroam network.

Is eduroam safe to use?

Eduroam utilizes WPA2 Enterprise encryption and 802.1X EAP-TLS authentication to ensure your data security during transmissions over the wireless medium.

However once your data transitions over to the wired medium or local network, you should be aware that any local security measures at that institution will apply to you as well.

For example, the firewall policies at the visited institution may be different from those at your home institution, and as a visitor, you may have access to fewer services and resources on the Internet than you would normally.

Can UW students, faculty, and staff use eduroam while at the UW?

Yes, UW faculty, staff, and students can access the eduroam service on any of the three UW campuses, UW Medicine and other UW Wi-Fi locations where the SSID is present.

Can UW students, faculty, and staff access eduroam at another institution?

Yes, if the institution you are visiting is a participating member of eduroam, you will have access. Before using eduroam, you will first have to configure your device for eduroam via http://onboard.wifi.uw.edu.

I am a visitor to the UW. Why can’t I access eduroam?

Most commonly this is a configuration issue on your device. Please contact the IT services at your home institution for more information first.

If the eduroam SSID does not appear in your wireless connections list, first check that:

  • There are other wireless networks available (there could be a problem with your device).
  • Your device is in range of the eduroam network. Eduroam is currently available at all UW-IT supported Wi-Fi locations.

If both of these are correct, you’ve contacted IT services at your home institution and you are still having problems connecting to the eduroam network, please contact UW-IT Help so they can investigate the issue further.

Which devices and computer operating systems can I use to access eduroam?

Eduroam has compatibility with a variety of different devices/operating systems. The following are supported by the SecureW2 JoinNow onboarding software:

  • Windows 7 and above
  • macOS 10.4 and above
  • Ubuntu 14.04 LTS and above
  • Fedora 23 and above
  • Chrome OS 81.0.4044.141
  • iOS 4.x and above
  • Android 2.x and above

Do I have to run the onboarding software every time I want to use eduroam?

No. You only need to onboard your device once and it will remember your settings for the next time you’re in eduroam range.

Can I onboard my devices before coming to the UW if I already have a UW NetID?

Yes. Just make sure you have some sort of Internet connection (home, coffee shop, tethered to cell, etc) and onboard via http://onboard.wifi.uw.edu. You will get a connection failed message, however the profile will have been installed and when you’re next in range of eduroam, your device will connect.

The exception is macOS which will require you follow the usual onboard instructions at http://onboard.wifi.uw.edu and once you’re in range of eduroam, you will need to manually click the “eduroam” SSID in the macOS wireless manager. You will then be prompted to enter your local user account password (the one you use to login to the computer), then click “Always Allow”. This will only be required on your first connection.

Can I use eduroam without installing the onboarding software?

You can however it is not supported. Running the onboarding software utility ensures correct certificate, network and security profile configurations get installed on the client device.

You can add these settings manually by creating the new profile and security settings for the eduroam SSID, however UW-IT doesn’t recommend or support manual configurations of client devices or provide documentation. To manually onboard your device go to http://onboard.wifi.uw.edu and choose “Unknown” under device selection and follow the instructions.

I changed my UW NetID login. Do I need to onboard again?

Yes, you do need to onboard again after a UW NetID change.

I changed my UW NetID password. Do I need to onboard again?

No, you do not need to onboard again after a password change.

How can I verify the certificates eduroam uses?


You can compare the serial numbers and fingerprints of the certificates sent to you by our RADIUS servers and installed by SecureW2 JoinNow with the details below.

The supplicant on your device uses root and intermediate certificates to create a “chain of trust” to the server certificate. This validates the RADIUS server is trusted.

You will also have a device certificate and private key installed on your device which will be signed by “University of Washington Device Intermediate CA”. This certificate is what RADIUS uses to identify and authorize your device.

Please note that the certificate expiry date and time maybe look different depending on your timezone. It is recommended to compare the fingerprints if you’re unsure.

  • radius.uw.edu
    • Server certificate
    • Expires: Wednesday, August 4, 2021 at 4:59:59 PM Pacific Daylight Time (11:59:59 PM UTC)
    • Serial Number: 5F CA 06 03 4B A0 B9 BD EB E3 AC 86 3D 5A 4B 61
    • SHA-256: E1 58 5E D0 39 E0 20 57 63 1C 22 2E 26 98 1E 37 6E 2A 4B B3 C1 C5 1B D9 0D D3 B2 78 F1 88 48 9D
    • SHA-1: 86 A7 65 22 30 00 28 44 05 7D 24 FB 82 FA 1F 44 47 40 08 AE
  • InCommon RSA Server CA
    • Intermediate certificate authority
    • Expires: Wednesday, October 5, 2024 at 4:59:59 PM Pacific Daylight Time (11:59:59 PM UTC)
    • Serial Number: 47 20 D0 FA 85 46 1A 7E 17 A1 64 02 91 84 63 74
    • SHA-256: 0A 05 C4 62 75 63 90 DD 1F 1D 5D D8 27 94 C3 00 F0 4B E7 89 DC E7 6D 7E 31 2F 79 0D 68 FD 38 5A
    • SHA-1: F5 FB 01 DE A6 E5 9C A6 DD 05 70 54 F4 A3 FF 72 DD E1 D5 C6
  • USERTrust RSA Certification Authority
    • Root certificate authority
    • Expires: Monday, January 18, 2038 at 3:59:59 PM Pacific Standard Time (23:59:59 PM UTC)
    • Serial Number: 01 FD 6D 30 FC A3 CA 51 A8 1B BC 64 0E 35 03 2D
    • SHA-256: E7 93 C9 B0 2F D8 AA 13 E2 1C 31 22 8A CC B0 81 19 64 3B 74 9C 89 89 64 B1 74 6D 46 C3 D4 CB D2
    • SHA-1: 2B 8F 1B 57 33 0D BB A2 D0 7A 6C 51 F7 0E E9 0D DA B9 AD 8E

I am a system administrator and I need to configure multiple machines with eduroam access. Is this possible?


It is not currently possible to provision devices en masse but may be possible in the future. Please contact help@uw.edu for more information

I received a message about my wireless driver being out of date while onboarding. What does this mean?

Certain older generation Windows based Intel wireless adapters are unable to see Wi-Fi 6/802.11ax networks unless their drivers have been updated. This means that your device may not be able to connect to the Wi-Fi in any buildings that are running the latest generation Wi-Fi Access Points.

You can view the advisory from Intel here or download the automated Intel® Driver & Support Assistant here.

I am having trouble onboarding my device. What should I do before contacting UW-IT?

Firstly, take a look at our Eduroam Onboarding Guides page. Otherwise please follow the steps below which fix most common problems.

1) Ensure the date and time is correct on your device.

2) Ensure your device software and wireless drivers are up to date.

3) Ensure your UW NetID is correctly enrolled to receive eduroam access. To check this, navigate to https://uwnetid.washington.edu, enter your UW NetID and password.

On the left side of the screen under “Manage <your UW NetID>”, click on Computing Services.

Make sure that you have “Eduroam Radius Access” enabled under the Active Services.

If it’s not and the service is listed under the Inactive Services, click the check box and hit the Subscribe button to add it to your active services. The update to enable this feature will be run and you should be able to access the eduroam service. If you are still having issues, contact UW-IT Help

4) Occasional onboarding issues are caused by old eduroam profiles being present on a device. Generally the onboarding application will take care of this, but if it can’t, a removal of the old profile will resolve most problems.

 

Below are instructions for the most common device operating systems.

macOS

  • Remove the eduroam profile (if it exists) by following the instructions.
    • Click the Apple icon
    • Click System Preferences
    • Click Profiles
    • Select the “University of Washington” Device Profile and click “-” (bottom left) then Remove.
    • Re-onboard via http://onboard.wifi.uw.edu

Windows

  • Remove the eduroam profile (if it exists) by following the instructions.
    • Open the Windows menu and click the gear icon to open Windows Settings
    • Click Network & Internet
    • Click Wi-Fi on the left
    • Click Manage known networks
    • Select the “eduroam” WiFi network and select Forget
    • Re-onboard via http://onboard.wifi.uw.edu

iOS

  • Remove the eduroam profile (if it exists) by following the instructions.
    • Open Settings -> General -> Profile
    • Tap the “University of Washington” Configuration Profile and then tap Delete Profile
    • Enter your PIN
    • Tap Delete
    • Re-onboard via http://onboard.wifi.uw.edu

Android

  • Remove the eduroam profile (if it exists) by following the instructions.
    • Open the Applications window
    • Tap Settings
    • Tap Connections
    • Tap WiFi
    • Tap “eduroam” then tap Forget
    • Re-onboard via http://onboard.wifi.uw.edu

Can’t find what you’re looking for?

If these instructions do not resolve your issue, please contact UW-IT using the form linked below.

Get help connecting to Eduroam

Last reviewed June 11, 2020