IT Connect
Information technology tools and resources at the UW

Eduroam FAQ

 

Does the UW have access to eduroam?

Answer: Yes, the UW is a participating member of eduroam. This means:

  • UW faculty, staff and students visiting other eduroam participating institutions can access eduroam using their UW NetID credentials.
  • Visitors to the University can access the eduroam network for secure wireless access to the Internet and other resources at their home institution.

The eduroam SSID will show up in your wireless connections on your mobile device or laptop.

 

What does eduroam cost?

Answer: Eduroam is a free service provided by an international federation of academic institutions for all members of the worldwide research and education community.

 

How does eduroam work?

Answer: Eduroam works by sending your UW NetID (in the format yourNetID@uw.edu) and password details through a secure ‘tunnel’ back to your home institution to be authenticated. Once your credentials have been verified by your home institution, that information is returned to the institution you are visiting so you can access the eduroam wireless network.

For example, if you were visiting the University of Oregon, you would log in to the eduroam wireless network using your UW NetID (in the format of yourNetID@uw.edu)  and password. This information is sent to the UW’s identity management system to be authorized, and a message sent back to the University of Oregon advising that your credentials are correct and you are allowed access to eduroam network.

 

Is eduroam safe to use?

Answer: Eduroam utilizes WPA2 Enterprise encryption and 802.1X authentication standards to ensure your data security during transmissions over the wireless medium.

However once your data transitions over to the wired medium or local network, you should be aware that any local security measures at that institution will apply to you as well.

For example, the firewall policies at the visited institution may be different from those at your home institution, and as a visitor, you may have access to fewer services and resources on the Internet than you would normally.

 

I’m UW faculty, staff or student. Can I access eduroam while I’m at the University of Washington?

Answer:  Yes, UW faculty, staff, and students can access the eduroam service on any of the three UW campuses, UW Medicine and other UW Wi-Fi locations where the SSID is present.

 

I’m UW faculty, staff or student. Can I access eduroam at another institution?

Answer: Yes, if the institution you are visiting is a participating member of eduroam, you will have access. Before using eduroam, you will first have to configure your device for eduroam via http://onboard.wifi.uw.edu.

 

I’m a visitor to the UW. Why can’t I access eduroam?

Answer: If you are from another institution visiting the UW, your home institution may not allow you access to eduroam from another location. Please contact the IT services at your home institution for more information.

If you should have access to eduroam, but if the eduroam option does not appear in your wireless connections, first check that:

  • There are other wireless networks available (there could be a problem with your device)
  • Your device is in range of the eduroam network. Eduroam is currently available at UW-IT supported Wi-Fi locations.

If both of these are correct,  and you are still having problems connecting to the eduroam network, please contact UW-IT Help so they can investigate the issue further.

 

Which devices and computer operating systems can I use to access eduroam?

Answer: Eduroam has compatibility with a number of different devices/operating systems. The following are supported by the SecureW2 JoinNow on-boarding software:

  • Windows
  • macOS
  • Linux
  • Chrome OS
  • iOS
  • Android

Do I have to run the on-boarding software every time I want to use eduroam?

Answer: No. You only need to onboard your device once and it will remember your settings for the next time you’re in eduroam range.

 

Can I onboard my devices before coming to the UW if I already have a UW NetID?

Answer: Yes. Just make sure you have some sort of Internet connection (home, coffee shop, tethered to cell, etc) and onboard via http://onboard.wifi.uw.edu. You will get a connection failed message, however the profile will have been installed and when you’re next in range of eduroam, your device will connect.

The exception is macOS which will require you follow the usual onboard instructions at http://onboard.wifi.uw.edu and once you’re in range of eduroam, you will need to manually click the “eduroam” SSID in the macOS wireless manager. You will then be prompted to enter your local user account password (the one you use to login to the computer). This will only be required on your first connection.

 

Can I use eduroam without installing the on-boarding software?

Answer: You can however it is not supported. Running the on-boarding software utility ensures correct network and security profile configurations on the client device.

You can add these settings manually by creating the new profile and security settings for the eduroam SSID, however UW-IT doesn’t recommend or support manual configurations of client devices or provide documentation.

 

I changed my NetID password. Do I need to on-board again?

Answer: Some devices will allow you to update the password in the eduroam profile, however we recommend that you on-board again to minimize any possible mis-configurations.

 

How can I verify the certificates eduroam uses?

Answer: You can compare the SHA-256 and SHA-1 fingerprints of the certificates sent to you by our RADIUS servers and installed by SecureW2 JoinNow with the details below.

Please note that the certificate expiry date and time maybe look different depending on your timezone. It is recommended to compare the fingerprints if you’re unsure.

  • radius.uw.edu
    • Expires: Sunday, August 25, 2019 at 4:59:59 PM Pacific Daylight Time
    • Serial Number: 00 F4 8A 5D CD 54 99 E0 63 5F 98 A9 D5 2C 4E 27 D9
    • SHA-256: F1 BD F2 78 4C 14 B2 A4 0A 7D 07 72 65 D2 38 AE 64 B8 44 85 8E 1D 8A C9 96 B5 9F 9C 8D 2E 89 62
    • SHA-1: 97 E5 A1 4E 2B 9D 3C 14 F0 57 6A 58 9B 2B 85 15 4E 4D 1A 7C
  • AddTrust External CA Root
    • Root certificate authority
    • Expires: Saturday, May 30, 2020 at 3:48:38 AM Pacific Daylight Time
    • Serial Number: 1
    • SHA-256: 68 7F A4 51 38 22 78 FF F0 C8 B1 1F 8D 43 D5 76 67 1C 6E B2 BC EA B4 13 FB 83 D9 65 D0 6D 2F F2
    • SHA-1: 02 FA F3 E2 91 43 54 68 60 78 57 69 4D F5 E4 5B 68 85 18 68
  • USERTrust RSA Certification Authority
    • Root certificate authority
    • Expires: Monday, January 18, 2038 at 3:59:59 PM Pacific Standard Time
    • Serial Number: 01 FD 6D 30 FC A3 CA 51 A8 1B BC 64 0E 35 03 2D
    • SHA-256: E7 93 C9 B0 2F D8 AA 13 E2 1C 31 22 8A CC B0 81 19 64 3B 74 9C 89 89 64 B1 74 6D 46 C3 D4 CB D2
    • SHA-1: 2B 8F 1B 57 33 0D BB A2 D0 7A 6C 51 F7 0E E9 0D DA B9 AD 8E
  • USERTrust RSA Certification Authority
    • Intermediate certificate authority
    • Expires: Saturday, May 30, 2020 at 3:48:38 AM Pacific Daylight Time
    • Serial Number: 13 EA 28 70 5B F4 EC ED 0C 36 63 09 80 61 43 36
    • SHA-256: 1A 51 74 98 0A 29 4A 52 8A 11 07 26 D5 85 56 50 26 6C 48 D9 88 3B EA 69 2B 67 B6 D7 26 DA 98 C5
    • SHA-1: EA B0 40 68 9A 0D 80 5B 5D 6F D6 54 FC 16 8C FF 00 B7 8B E3
  • InCommon RSA Server CA
    • Intermediate certificate authority
    • Expires: Wednesday, September 18, 2024 at 4:59:59 PM Pacific Daylight Time
    • Serial Number: 25 B5 5D 45 99 B4 5D 74 E6 DC C9 21 00 54 81 72
    • SHA-256: B1 77 4F 9B 26 B4 E2 D5 F7 51 71 36 00 FF EB 16 3B 34 CB 7A 14 C2 C0 79 70 4E 95 36 4F BC CA 49
    • SHA-1: F4 F2 6A 16 D4 B9 13 CF 32 08 E6 64 E3 DD 38 4E 56 CE 77 AF

 

I’m a system administrator and I need to configure multiple machines with eduroam access how do I go about it?

Answer: Go to http://onboard.wifi.uw.edu, set your device type to “Unknown” and utilize the settings and certificates listed for your setup. Keep in mind that by using a manual setup, the machines may not be configured to verify certificates or server names. If you have Apple devices you’re on-boarding via MDM, please contact UW-IT Help for the .mobileconfig.

 

I’m having trouble on-boarding my device. What should I do before contacting help desk?

Answer: 

1) Ensure you have entered your password correctly. You can accomplish this by following step 2 and manually entering in your NetID and password. Please do not rely on a password manager to fill in your password on this site in order to confirm that you’re entering the correct password in to the on-boarding software.

2) Ensure your NetID is correctly enrolled to receive eduroam access. To check this, navigate to https://uwnetid.washington.edu, enter your NetID and password.

On the left side of the screen under title of Manage <your NetID>, click on Computing Services.

Check to make sure that you have “Eduroam Radius Access” enabled under the Active Services.  If not and the service is listed under the Inactive Services, click the check box and hit the Subscribe button to add it to your active services. The update to enable this feature will be run and you should be able to access the eduroam service. If you are still having issues, contact UW-IT Help

3) Most on-boarding issues are caused by old eduroam profiles being present on a device. Generally the on-boarding application will take care of this, but if it can’t, a removal of the old profile will resolve most problems.

Below are instructions for the most common device operating systems.

  • If you’re using macOS, remove the eduroam profile (if it exists) by following the instructions.
    • Click the Apple icon
    • Click System Preferences
    • Click Profiles
    • Select the “University of Washington eduroam” Device Profile and click – (bottom left) then Remove.
    • Re-onboard via http://onboard.wifi.uw.edu
  • If you’re using iOS, remove the eduroam profile (if it exists) by following the instructions.
    • Open Settings -> General -> Profile
    • Tap the Configuration Profile that is listed and then tap Delete Profile
    • Enter your PIN
    • Tap Delete
    • Re-onboard via http://onboard.wifi.uw.edu
  • If you’re using Android, remove the eduroam profile (if it exists) by following the instructions.
    • Open the Applications window
    • Tap Settings
    • Tap Connections
    • Tap WiFi
    • Tap “eduroam” then tap Forget
    • Re-onboard via http://onboard.wifi.uw.edu
  • If you’re using Windows 10, remove the eduroam profile (if it exists) by following the instructions.
    • Open the Windows menu and click the gear icon to open Windows Settings
    • Click Network & Internet
    • Click Wi-Fi on the left
    • Click Manage known networks
    • Select the “eduroam” WiFi network and select Forget
    • Re-onboard via http://onboard.wifi.uw.edu

If these instructions do not resolve your issue, please contact the UW-IT Help.