eduroam - First Time Setup

This document explains the process for connecting with eduroam on different types of devices by first establishing a network profile.

eduroam Configuration Assistant Tool (CAT)

It is strongly recommended to use eduroam's Configuration Assistant Tool (CAT) and follow the instructions on the eduroam website before attempting to do it manually.

Click the link below to the eduroam Configuration Assistant Tool (CAT) from the device you'd like to connect.

The tool automatically detects your device's operating system (OS), and provides the installer that matches. You will also have the option to choose another installer to download for other operating systems.

How do I log in to eduroam?

UW-Madison users must use their fully-scoped NetID, or essentially the NetID email address. The domain, '@wisc.edu,' must be added to the username, or the connection will fail.

Username: NetID@wisc.edu

Password: NetID password

Windows Computers

Downloadable Installer Instructions (Preferred)

From the device, download UW-Madison Configuration Assistant Tool (CAT) for Windows 7, 8, 10, or Vista.
Open/Run the .EXE installer. You may receive a User Account Control prompt. Click on Yes:
A blank command prompt will show and state
Profile eduroam is added on interface. . .
Press any key to continue...
Press any key on the keyboard to continue
The profile is installed. To connect, open your System Network, choose eduroam, and click "Connect". When prompted for Credentials, enter a fully qualified NetID followed by @wisc.edu (ex. bbadger@wisc.edu) and password. Note: you must have the @wisc.edu after your NetID.

Step by Step Installation Instructions - Windows 7

Click the Network icon in the Windows taskbar:
Select Open Network and Sharing Center
Click on Manage Wireless Networks:
Click on Add:
Click on Manually create a network profile:
Type in eduroam for Network Name:
-Select WPA2-Enterprise for Security type:
-Select AES for Encryption Type:
-Uncheck Start this connection sutomatically.
Click Next.
Click Change connection settings:
Click the Security tab
Select Microsoft Protected EAP (PEAP) for Choose a network authentication method:
Click on Settings
Check the box labeled Connect to these servers: and enter login.wisc.edu (1)
-Check the box AddTrust External CA Root from the list Trusted Root Certificaiton Authorities (2)
-Check the box Do not prompt user to authorize new servers or trusted certificaiton authorities (3)
-Under Select Authentication Method:, select Secured Password (EAP/MSCHAPv2)
Click Configure(4)
Uncheck Automatically use my windows logon name and password (and domain if any).
Click OK to close the EAP MSCHAPv2 Properties
If using a 32-bit OS then check the box for COMODO Certification Authority
Not sure if your OS is 32 bit? Check Windows (Vista, 7, 8, &10) - Determining 32-bit or 64-bit Versions
Click OK to close the Protected EAP Properties dialog box to return to the eduroam Wireless Network Properties dialog:
Click Advanced settings
Check the box Specify authentication mode:
-Select User authentication from the drop down list.
Click OK to close the Advanced settings dialog box:
Click OK to close the eduroam Wireless Network Properties dialog box:
Click Close to close the Manually connect to a wireless network dialog box
Close the 'Manage Wireless Networks' window:

Step by Step Installation Instructions - Windows 8

Right click the Network icon in the Windows taskbar:
In the Network and Sharing centre, select Setup a New Connection or Network
Select Manually connect to a wireless network
Type in eduroam for Network Name:
-Select WPA2-Enterprise for Security type:
-Select AES for Encryption Type:
-Check Start this connection sutomatically.
Click Next.
Click Change connection settings
Click the Security tab
Select Microsoft Protected EAP (PEAP) for Choose a network authentication method:
Click on Settings
Check the box labeled Connect to these servers: and enter login.wisc.edu (1)
-Check the box AddTrust External CA Root from the list Trusted Root Certificaiton Authorities (2)
-Check the box Do not prompt user to authorize new servers or trusted certificaiton authorities (3)
-Under Select Authentication Method:, select Secured Password (EAP/MSCHAPv2)
Click Configure(4)
Uncheck Automatically use my windows logon name and password (and domain if any).
Click OK to close the EAP MSCHAPv2 Properties
If using a 32-bit OS then check the box for COMODO Certification Authority
Not sure if your OS is 32 bit? Check Windows (Vista, 7, 8, &10) - Determining 32-bit or 64-bit Versions
Click OK to close the Protected EAP Properties dialog box to return to the eduroam Wireless Network Properties dialog:
Click Advanced settings
Check the box Specify authentication mode:
-Select User authentication from the drop down list.
Click OK to close the Advanced settings dialog box:
Click OK to close the eduroam Wireless Network Properties dialog box:
Click the Network icon in the Windows taskbar:
Click eduroam and then click Connect
Click Connect when it prompts you about the server's identity
When prompted for credentials, enter fully qualified NetID (bbadger@wisc.edu) and password. Note: you must have the @wisc.edu after your NetID.

Mac Computers

From the device, download UW-Madison Configuration Assistant Tool (CAT) for Apple devices. (Safari Users: Right-Click, Download Linked File As...)
- It is highly recommended you use Safari.
- If you have the iPhone Configuration Utility installed the profile will not open with System Preferences by Default.
  - In order to force the profile to open with System Preferences, Control-Click (or Right-Mouse Click) the profile, Select Open With... System Preferences.
Click Show Profile to view and verify. Even if the profile shows Unsigned instead of Verified, it is fine to proceed with the installation.
Click Continue.
Enter your fully-qualified NetID@wisc.edu and NetID Password.
Finally, you may be prompted for local machine credentials to install the profile.
In order for your computer to default to eduroam you may need to move it to top of your list or remove UWNet
Open the System Preferences window.
- In the Internet & Wireless section, click Network.
- In the Network window's left-hand column, select Wi-Fi.
- Click the Advanced... button in the lower right area of the window.
- In the list of preferred networks, highlight UWNet and click the minus button or move eduroam.
- After removing UWNet from the list or moving eduroam, click OK and close any open windows. Answer OK/Yes if asked.

iOS Devices

iOS Devices (iPhone/iPad)

From the device, download UW-Madison Configuration Assistant Tool (CAT) for Apple devices. (Safari Users: Right-Click, Download Linked File As...)
- It is highly recommended you use Safari.
Tap Allow to download the network profile to the device. Once successful, a message saying the profile has been downloaded should appear:
Open the settings app on the device, and navigate to the new Profile Downloaded at the top:
On the Install Profile page, tap the Install option in the top right.
Tap the Install that appears on the bottom to install the profile. Note: If there is a passcode set on the device, it will be prompted:
Once the profile is installed, go the to Wi-Fi settings and select eduroam from the list of networks that appear. It will prompt for a username first, which should be the NetID email (NetID@wisc.edu) for the user. After tapping Next, a similar screen will appear to type in the password for that NetID.
The eduroam network will appear under the Wi-Fi at the top. The device is now connected:

Android Phones/Tablets

In the General Settings, make sure WiFi is turned on.
Download the free app geteduroam (for OS versions 11+) or eduroamCAT (for OS versions 4-10). For most Android devices, this can be found in the Google Play store.
From the device, download UW-Madison Configuration Assistant Tool (CAT) for your appropriate Android version (4.3-7, 8 to 10, or 11 and higher).
Open the installer file with geteduroam or eduroamCAT, depending on your OS version. If you cannot find the installer, try looking through your downloaded files: Find & delete files on Android.

Android Phones/Tablets: Manual Method (not recommended)

If the above method does not work, you can also attempt to download the eduroam security certificate on your phone from https://support.comodo.com/index.php?/comodo/Knowledgebase/Article/View/853/74/addtrustexternalcaroot
Install the downloaded certificate by pressing the download button. The file will likely install automatically, and may prompt you to verify your identity. If it does not install automatically, locate it in your files and open it.
Give the certificate a name, and make sure Wi-Fi is selected under the "Used for" category.
Select the eduroam SSID
Configure the Android supplicant as follows:
- EAP Method: PEAP
- Phase 2 Authentication: MSCHAPv2
- CA certificate: Select the certificate you downloaded and named earlier
- Domain: login.wisc.edu
- Anonymous Identity:anonymous@wisc.edu
- Identity:NetID@wisc.edu
- Password:NetID Password
Press connect, and you should now be connected!