How to Connect to UAB s Wireless Networks Sections: Page: Checking Windows XP for Service Pack 3 3 Configuring Windows XP SP3 to Connect to uabwifi-nac: Part I 5 Configuring Windows Vista to Connect to uabwifi-nac: Part I 12 Configuring Windows 7 to Connect to uabwifi-nac: Part 1 21 Configuring Mac OS X to Connect to uabwifi-nac 32 University of Alabama at Birmingham Information Technology (UAB IT) provides a wireless network in support of the academic, research, and administrative work of the UAB community. This wireless network serves classrooms, common areas, green spaces, and many other popular areas around campus. The available wireless networks are uabwifi-nac and uabwifi. The SSID uabwifi-nac provides a more secure and seamless wireless environment for all UAB wireless network users. uabwifi-nac is the recommended wireless network for all wireless users and will be the only wireless network available to students starting in Fall Semester of 2010. The SSID uabwifi is UAB s legacy wireless environment. This wireless environment utilizes captive portal technology, more commonly known as a Login page, along with a manually configured, encryption key to support older devices. To connect to uabwifi, choose it from your list of available networks and enter the WEP key, available at www.uab.edu/wireless. After connecting, open a browser window and enter your BlazerID and password when prompted. Connecting to uabwifi-nac System Requirements 1. The operating system must either be Windows XP (SP3), Windows Vista, or MAC OSX. 2. The wireless adapter must be able to support WPA2 AES encryption. 3. The laptop must be up to date on operating system patches and antivirus software. Antivirus Requirements: Beginning with the Fall 2009 semester, in order to connect to ResNET or uabwifi-nac, students machines will need to have one of the following antivirus applications with up-to-date definitions (see below for information on how to download antivirus software provided by UAB): 1. Microsoft Forefront 2. McAfee 3. Norton (Symantec) 4. AVG Mac users: Antivirus software is not required to connect to uabwifi-nac. UAB Provided Antivirus Solutions Page 1
To download Microsoft Forefront for Windows or Sophos for Mac at no additional charge, please visit our Software Download Site at www.uab.edu/it/software (you will need to log in with your BlazerID and strong password). You may also choose to schedule an appointment with UAB IT s Help Desk, AskIT, for assistance in meeting this requirement. To make an appointment, please call AskIT at 205-996-5555. Page 2
Checking Windows XP for Service Pack 3 (SP3) Before proceeding attempting to connect to uabwifi-nac, please follow these steps to determine whether the machine has been updated with Windows XP Service Pack 3 (SP3): 1. Left-click on the Start button. 2. From the Start menu, right-click on My Computer and choose Properties from the dropdown menu that appears. Page 3
3. Review the system specifications in the System Properties box. The service pack level is displayed under the operating system information, as shown below. If you already have have Service Pack 3 installed: Please proceed to the steps on page 4, under Configuring Windows XP SP3 to Connect to uabwifi-nac: Part I. If you do not have Service Pack 3 installed: you will need to install it before proceeding with the steps to connect to uabwifi-nac. Students in residence halls can do this by connecting to ResNET via the Ethernet port in their dorm room. Otherwise, if you are unable to connect to the Internet to download and install Service Pack 3, you may contact AskIT at 205-996-5555 to set up an appointment. The technician at your appointment will provide the installation file (typically by copying it onto your Desktop) and advise you that your computer s power adapter must be plugged into an outlet in order to install Service Pack 3. Page 4
Configuring Windows XP SP3 to Connect to uabwifi-nac: Part I Step 1a. Configure Your Wireless Client in Windows XP. The following instructions are based on the Microsoft Windows Wireless Zero Configuration service-the wireless client that is provided by the Windows operating system. During this configuration process, you will determine if your system supports the WPA2 (IEEE 8 02.11i) WiFi standards that are required for use of the uabwifi-nac network. 1. Click on the Start menu, select "Connect To" and choose "Show all connections." 2. Right-click on Wireless Network Connection and choose Properties. Page 5
3. In the "Wireless Network Connection Properties" window, click on the "Wireless Networks" tab at the top. Make sure that the box next to "Use Windows to configure my wireless network settings" is checked (as shown below). Note: if you do not see the Wireless Networks tab you may need to disable the proprietary wireless network management application on your laptop (the steps for doing this will be different for each model; for assistance please call AskIT at 205-996-5555). 4. Next, in the "Preferred networks" panel, click the "Add" button. Page 6
5. In the Wireless network properties window, enter uabwifi-nac (all lower case) in the Network name (SSID) field. Choose WPA2 from the Network Authentication drop-down list and "AES" will automatically populate the "Data encryption" field (as shown below). Note: If WPA2 is not included in the Network Authentication drop-down list, this indicates either that the driver for your wireless adapter needs to be updated, or that the wireless adapter may not be WPA2 compatible. For assistance with updating the driver for your wireless adapter, please contact AskIT at 205-996-5555. 6. Click on the "Authentication" tab. Page 7
7. Choose "Protected EAP (PEAP)" from the "EAP type" drop-down list (as shown below). 8. Make sure that the boxes beside Authenticate as computer when computer information is available and Authenticate as guest when user or computer information is unavailable are NOT checked (as shown below). 9. Click on the Properties button under EAP type. Page 8
10. In the "Protected EAP Properties" window, make sure that "Validate server certificate" is selected (as shown below). 11. In the list of "Trusted Root Certification Authorities, scroll down and check the box next to "Equifax Secure Certificate Authority" (as shown below). If "Equifax Secure Certificate Authority" is not available, do not check any of the "Trusted Root Certification Authorities options. 12. Choose "Secured password (EAP-MSCHAP v2)" from the "Select Authentication Method" dropdown list. 13. Check the box next to "Enable Fast Reconnect" to enable it. 14. Click on the Configure button next to Select Authentication Method. Page 9
15. In the "EAP MSCHAPv2 Properties" window, uncheck "Automatically use my Windows logon name and password (and domain if any), then click OK. 16. Click OK in the "Protected EAP Properties," "Wireless network properties" and "Wireless Network Connection Properties" windows to close them. 17. A balloon will pop up from your task bar indicating "Wireless Network Connection: Click here to select a certificate or other credentials for connection to the network uabwifi-nac." Click on the balloon. Page 10
18. Enter your BlazerID and strong password in the User name and Password fields, leave the Logon domain field blank, and then click OK. Note: If "Equifax Secure Certificate Authority" was unavailable for selection in Step 11, at this point a balloon will pop up from your task bar indicating "Wireless Network Connection: Click here to select a certificate or other credentials for connection to the network uabwifi-nac." Click on the balloon and accept the certificate. 19. A balloon will pop up indicating that you are now connected to uabwifi-nac. Please proceed to page 20 for the Windows Operating Systems: Authenticate on uabwifi-nac: Part 2 section. Page 11
Configuring Windows Vista to Connect to uabwifi-nac: Part I 1. Click on the Start button and choose Connect To. 2. Click on Set up a connection or network. Page 12
3. Choose Manually connect to a wireless network and click Next. Note: If you are asked to "Choose a wireless adapter," select "Wireless Network Connection" and click "Next." Page 13
4. In the Manually connect to a wireless network window, fill in uabwifi-nac for the Network name, WPA2-Enterprise for the Security type, and AES for the Encryption type, as shown below. Leave Start this connection automatically checked (or check it if it is unchecked), then click Next. Page 14
5. Click Change connection settings in the next Manually connect to a wireless network window. Page 15
6. On the Connection tab, leave Connect automatically when this network is in range checked, then click to uncheck Connect to a more preferred network if available, as shown below. Click on the Security tab. Page 16
7. Click on the Settings button next to Microsoft: Protected EAP (PEAP). Page 17
8. In the Protected EAP Properties window, place a check next to Validate server certificate. 9. Under Trusted Root Certification Authorities, scroll down and place a check next to Equifax Secure Certificate Authority. 10. Under "Select Authentication Method," select "Secured Password (EPA-MSCHAP v2). 11. Click the "Configure" button next to "Secured Password (EPA-MSCHAP v2). 12. Uncheck the option to "Automatically use my Windows logon name password (and domain if any)." Click OK. Page 18
13. Click OK to close the Protected EAP Properties and uabwifi-nac Wireless Network properties, then click Close in the Manually connect to a wireless network window. 14. A balloon will appear near the system tray that reads, "Additional information is required to connect to uabwifi-nac." Click on the balloon. 15. A window will open prompting you to Enter Credentials. Enter your BlazerID and strong password in the User name and Password fields, leave the Logon domain field blank, and then click OK. 16. You will see the status of establishing your connection to uabwifi-nac. Page 19
17. Another balloon will pop up indicating that you are connected to uabwifi-nac. 18. You will be prompted to Set Network Location. Choose Public Location and you have completed the steps to connect to uabwifi-nac on your Windows Vista computer. Please proceed to page 20 for the Windows Operating Systems: Authenticate on uabwifi-nac: Part 2 section. Page 20
Configuring Windows 7 to Connect to uabwifi-nac: Part I 1. Right click the network connection icon in the task bar. Click on the Open Network and Sharing Center 2. Select the Set up a new connection or network. Page 21
3. Now select Manually connect to a wireless network. Click Next to continue. 4. You will now enter the following settings: Network Name: uabwifi-nac Security Type: From the dropdown select WPA2-Enterprise Encryption type should be set to AES Page 22
5. Click Next on the previous screen and you will see the network successfully added message. Click on the Change connection settings option. 6. In this window select the Security tab. Click on the Settings button. Page 23
7. In this window make sure that Validate server certificate and Equifax Secure Certificate Authority are selected. For Select Authentication Method make sure Secured password (EAP-MSCHAP v2) is selected and then click on the Configure button. 8. Ensure that the Automatically use my Windows logon is not selected. Page 24
9. Click OK on each window to complete the process. If you are now in an area that has access to the wireless network you should be prompted for your Blazer ID and password. 10.This completes the setup for Windows 7 and you should now be connected to the network. Please proceed to Windows Operating Systems: Authenticate on uabwifi-nac: Part 2 to complete the registration process. Page 25
Windows Operating Systems: Authenticate on uabwifi-nac: Part 2 1. Open a new browser window and you will be redirected to a page displaying WELCOME TO THE UAB NETWORK. Click Start. Page 26
2. Fill in all of the fields with the requested information, then click Download. 3. On the next page, Click here to download the Client Security Agent. 4. Click Run. Page 27
5. Click Run again. 6. Click Next. Page 28
7. Click Finish. Page 29
8. Enter your BlazerID and password and click Login. 9. You may see a green bar indicating the progress of the scanning process. Page 30
10. You will receive a message indicating that You have successfully registered. Close any open browser windows, wait a moment and then open a new browser window to access the Internet via the uabwifi-nac network. Page 31
Configuring Mac OS X to Connect to uabwifi-nac 1. Click on the AirPort icon in the menu bar and choose Turn AirPort On, then click on the AirPort icon again and choose Open Network Preferences 2. Click on the Advanced button. Page 32
3. Under AirPort, click on the plus sign to add a new network. 4. Enter uabwifi-nac in the Network Name field, WPA2 Enterprise in the Security field, and your BlazerID and strong password in the User name and Password fields. Set the 802.1X field to Automatic, and click Add. Page 33
5. Click OK. 6. Click Apply, then close the Network window. Page 34
7. Click on the AirPort icon and choose uabwifi-nac. 8. A prompt to Verify Certificate will open. Click Show Certificate. Page 35
9. Click Always trust rad1.dpo.uab.edu and then click Continue. Page 36
10. You will be prompted for your Mac OS X system credentials. 11. Open a browser window and you will be redirected to a page displaying WELCOME TO THE UAB NETWORK. Click Start. Page 37
12. Fill in all of the fields with the requested information, then click Download. Page 38
13. In the Opening CSA.zip window, choose Save File and click OK. 14. Double-click on the file to open it, then click Open. Page 39
15. You will be redirected to a page indicating AUTHENTICATION SUCCESSFUL. Please close the browser and wait a moment, then open a new browser to access the Internet via the uabwifinac network. Page 40