Eduroam wireless network Apple Mac OSX 10.4

Transcription

1 Eduroam wireless network Apple Mac OSX 0.4 How to configure laptop computers to connect to the eduroam wireless network Contents university for the creative arts Contents Introduction Prerequisites Instructions for Apple Mac OS X 0.4 (Tiger) Technical Information Access for visitors to the University for the Creative Arts Access for University for the Creative Arts users visiting other institutions 2 Introduction The University for the Creative Arts offers wireless network access to students using their own or loan laptops across all campuses. A good wireless signal is available in all libraries and in some other areas. Network access is restricted almost exclusively to internet access for normal purposes. These include web browsing, ftp download, imap and pop mailbox access, and instant messaging. The name of the wireless network is eduroam. It is not an open wireless network: a username and password must be supplied. The instructions below tell you how to configure a laptop Mac OS X. In all cases the instructions are for the most recent version of the operating system. If you have an older version, you are encouraged to update it. The next section of this document gives some technical details to help students with laptops running Linux or other operating systems to connect. With these details it should be possible to configure Mac OS 0.4 to connect to eduroam. Only Windows XP, Vista and Mac OS 0. have been tested: ucreative IT cannot offer help with any other platform. The eduroam network has some further features. It allows enhanced network access to staff using ucreative laptops. It can also be used to give network access here to students and staff from other academic institutions. And it permits University students and staff to access the network at other academic institutions. These features are briefly documented in the final two sections of this document. Prerequisites To access the eduroam wireless network, you need: A laptop equipped with a wireless network card. Many laptops now come with a wireless network card built in make sure you switch this on when you are trying to configure your laptop. You will get best performance from a modern card that supports 802.g, but older cards which support 802.b will also work. Your ucreative login and password. Your ucreative login is the username you use to log in to University computers. It is the same as the first part of your University address and usually consists of one of your initials, followed by your family name, sometimes followed by a number. Somewhere to sit within range of the wireless networks. You should configure your laptop for the first time in one of the libraries, where the wireless signal is good, to avoid the risk that a weak wireless signal may cause the connection to fail.

2 . From the Apple menu, select System Preferences. 2. The System Preferences application opens. Click the Network icon. 3. In the list select AirPort. 4. Click on Configure. The System Preferences window changes to show the AirPort configuration.. Click the plus sign (+) to add a new preferred network. A dialogue box opens. 6. In the Network Name field, type eduroam. 7. From the Wireless Security drop-down menu. Choose WPA Enterprise. The dialogue box expands to show more fields. 2

3 8. In the User Name field, type your ucreative login followed Your ucreative login is the username you use to log in to University computers. It consists of your first initial, followed by your family name, sometimes followed by a number. Note: For many but not all people, what should be entered is the same as your full University address. If the first part of your University address is different to your ucreative login, make sure you type your ucreative login before If your address ensure that you leave out the students. portion. 9. In the Password field type the password for your ucreative login. Ensure that the 802.X drop-down menu shows Automatic. Then click OK. Connect to eduroam Your computer should now attempt to connect to the eduroam wireless network. After a few seconds, a Verify Certificate dialogue box will open. 0. Click Show Certificate. The dialogue box expands to show the certificate details.. Tick the check box next to Always trust and then click Continue. A dialogue box may appear informing you that eaptlstrust requires that you type your password. Enter the username and password that you use to log in to your Macintosh, then click OK. Note: Your computer may now appear to be busy, with the multicoloured busy cursor spinning. This is a bug. Move the spinning cursor to the title bar of the Verify Certificate dialogue box, then click, hold and drag to move the Verify Certificate dialogue box to the bottom of the screen. This should reveal a different dialogue box which asks you to type your password to make changes to your Certificate Trust Settings. Enter the username and password that you use to log in to your Macintosh, then click OK. 3

4 A dialogue box entitled 802.X Authentication opens. 2. The User Name field is already filled with your ucreative login Type your ucreative password in the Password field, ensure that the Only use this password once check box is unticked, then click OK. You are now connected to the eduroam wireless network 4

5 Technical Information The following technical information is to help people running Linux or other operating systems to configure their laptops. The system used to authenticate users and encrypt network traffic on eduroam at ucreative is WPA Enterprise, Wi-Fi Protected Access Enterprise. Other forms of WPA, including WPA-PSK and WPA2- Enterprise are not supported and will not work. WPA Enterprise is a combination of 802.x network access control and wireless encryption techniques. Both AES and TKIP encryption techniques are supported. 802.x relies on EAP, the Extensible Authentication Protocol to authenticate users. PEAPv0/EAP-MSCHAPv2 is used to transmit the ucreative login and password in a secure manner to Active Directory servers for verification. However, in order for laptops to be able to work consistently across eduroam sites, the ucreative login must be provided appended. PEAPv0/EAP-MSCHAPv2 requires that the server doing the authentication identify itself by means of an X.09 electronic certificate in a similar manner to a secure website. The certificate supplied by the ucreative authentication server is signed by the ucreative certification authority. This certification authority will be unknown to all computers except those issued by ucreative IT. Therefore for most operating systems either verification of the certificate must be turned off or the certificate manually installed and trusted. The root certificate for the ucreative certification authority can be downloaded onto computers on the internal wired network from here: Fast Reconnect is not supported and should be disabled. The ucreative implementation of eduroam also supports authentication using EAP-TLS. This method requires that the laptop has a certificate installed, and is only for laptops and other devices supplied by ucreative IT. EAP-TLS will not work with other laptops. Access for visitors to the University for the Creative Arts The University implements JANET Roaming Service Tier 2, documented at: This allows visitors from participating organisations to access the eduroam network here using their own username and password. Visitors should ensure that their eduroam setup is working correctly in their own organisation before travelling. Access for University for the Creative Arts users visiting other institutions Not all academic institutions support eduroam. An up to date list is available at: Students should ensure that their eduroam setup is working correctly here before travelling. They can then log in at other eduroam enabled institutions using their ucreative login and password.