eduroam and Guest Wi-Fi
Service description and features
eduroam is an international initiative that allows members of educational establishments to gain Internet access at other member sites easily, using credentials from their home site securely via wireless (Wi-Fi) and wired connections.
Each institute may also offer Guest Wi-Fi to visitors of their sites.
Using this service
Its important to note this service should NOT be used on shared devices, only devices you use yourself. This is because the device will remember the username and password from the last session. YOUR USERNAME & PASSWORD WILL BE SECURELY STORED ON THE DEVICE. eduroam is available at all of our campuses. City College Norwich (Ipswich Road & Norfolk House), Paston College (both Lawns & Griffons) and Easton College.
Please remember when you change your password, it needs to be updated on your device too!
Download area QR code
To configure your device download the setup installer or manually connect to eduroam Wi-Fi:
- Go to the Wi-Fi settings on your device (see your device's handbook OR Common device instructions below)
- Ensure Wi-Fi is switched on
- Configure your device to forget any previous eduroam Wi-Fi networks you may have joined
- Connect to the wireless network "eduroam"
Staff
- Enter your CCN Full Username. Full Usernames are usually your email address - made up of your firstname dot lastname e.g. Frank.Smith, followed by the institution you belong to e.g. ccn.ac.uk. so A full Staff username should look like: Frank.Smith@ccn.ac.uk
- Enter your CCN password. e.g. What you login to the computers with.
Students
- Enter your CCN Full Username. Full Usernames are usually your email address - made up of your short username e.g. U11JBOND, at student, followed by the institution you belong to e.g. student.ccn.ac.uk. so A full Student username should look like: U11JBOND@student.ccn.ac.uk
- Enter your CCN password. e.g. What you login to the computers with.
Visitors
- If visiting from another CCN site, please continue to login as above.
- If visiting from another academic institute who also operates eduroam, you will be able to connect here, using your home institutes eduroam credentials.
- All other visitors will need a guest ID and to login through the alternative guest wireless.
Alternative Guest Wi-Fi
Using this service on shared devices and other visitors
To connect to Alternative Wi-Fi services:
- Go to the Wi-Fi settings on your device (see your device's handbook OR Common device instructions below)
- Ensure Wi-Fi is switched on
- Connect to the wireless network with your institutes name e.g. "City College Norwich", "Paston College" or "Easton College"
- Open a browser where you will be redirected to the login page
- Enter your CCN Username. Usernames are usually what you login to workstations with (and can be email addresses too)
- Enter your CCN password.
If you are having problems please contact I.T. Services.
Frequently Ask Questions
Can I use eduroam?
All CCN staff and students can access eduroam using their full username and password. Guests and visitors will need to check with their educational establishments if they are also members of the eduroam network to use this facility. All other guests and visitors should use Alternative Wi-Fi provided.
Where can I use eduroam?
eduroam is available at most Universities and Colleges in Europe and USA, and many Universities around the world as well as hospitals and research facilities in the UK. A map of eduroam locations is available here: https://www.jisc.ac.uk/eduroam/participating-organisations. Further information about where eduroam is available can be found by visiting https://www.eduroam.org/where/
How do I connect or set up eduroam on my device
To help you get connected as quickly as possible, we have created connection instructions for some of the most commonly used devices:
Using the eduroam installer (This supports most devices)
- To use the eduroam installer:
- Navigate to https://cat.eduroam.org/
- Select the blue box, eduroam user: download your eduroam installer
- Select City College Norwich from the list
- Select either Student or Staff
- Click All platforms to view all installers available.
- Select the appropriate installer for your device, run the installer and follow all prompts
- When prompted enter your full username and password
Alternative Manual Settings
Wi-Fi device settings for iPad/iPhone/iPod
- Go to Settings and then Wi-Fi Networks (turn on Wi-Fi if necessary)
- Select eduroam You should be prompted for your credentials (unless it already has some stored; you can use the details button "(>)" to select "Forget this network")
- Username: your full username
- Password: your normal password. You will be prompted to confirm the certificate - the name will end in .nes.org.uk
- Press Accept
Wi-Fi device settings for Mac OS
Mac OS X 10.5 and newer
Steps:
- Open Network Preferences
- Click on Network Name and then Join Other Network
- Set Network Name: eduroam
- Set Security: WPA2 Enterprise
- User name: full username
- Password: (your normal password)
- 802.1X: Automatic
- Leave any TLS Certificate value blank
- Tick Remember this network
- Click Join and then Connect
Mac OS X 10.3.3 & 10.4 Earlier versions cannot connect using the built-in wireless client software.
Steps:
- Open Internet Connect
- Click on the Wi-Fi signal icon
- Click on Internet Connect at the end of the drop-down menu
- Click on 802.1x on the toolbar or click File -> New 802.1x connection
- In the Configuration drop-down menu select Edit Configurations
- Set Description to: eduroam
- Set Network port to your wireless card, e.g. AirPort
- User name: eduroam ID
- Password: (your normal password)
- Set Wireless Network: eduroam Authentication: tick PEAP and check nothing else is ticked
- Highlight PEAP and click the adjacent Configure button
- Outer identity: leave blank
- Click OK to return to the Internet Connect window
- Click OK
- Click Connect
- If prompted to trust a certificate, tick to accept
Wi-Fi device settings for Android (version 3 or higher is necessary)
- Enable 'Secure credential storage':
- Settings -> Security -> Secure credential storage
- You may need to choose a password for this storage area
- Go back to the main menu and then choose Settings again
- Go to Wireless & Networks and then Wi-Fi Settings or on newer versions just choose Wi-Fi
- If Wi-Fi is enabled, eduroam should be listed: Tap and hold on eduroam
- Or if eduroam isn't listed: Scroll to the bottom and choose Add Wi-Fi Network
- Enter the Network SSID of eduroam (all in lowercase)
- Edit network settings or Connect to network:
- Set security to 802.1x Enterprise
- Set EAP Type/method to PEAP
- Set Phase 2 Authentication/subtype to MSCHAPv2
- Leave any user/client certificate setting blank
- Set identity to your full username
- Set anonymous identity to the same
- Set Wireless password to your normal password
- Click Connect and then Save
Wi-Fi device settings for Windows Phone
(Instructions based on Nokia Lumia 610 & Windows Phone 7.5)
Steps
- Go to Settings -> Wi-Fi
- Check Wi-Fi is on
- Wait for the phone to detect the available networks
- Tap on the desired network to select it Status 'Connecting' should appear
- If the desired network does not appear: Go to the bottom of the Wi-Fi screen and tap "advanced"
- The "+" (add) button allows you to type in the network name
- It will prompt for login credentials: full username and password
Wi-Fi device settings for Windows 10
Standard setup
- Click the Network icon in the toolbar (bottom left of the desktop)
- Check that Wi-Fi is on - if not, turn it on by clicking in the Wi-Fi box (the box will turn blue once it is on)
- Wait for the device to detect available networks
- Click on eduroam, tick ☑ "Connect automatically" and click Connect.
- Enter your full username
- Enter your usual password and click OK
- Microsoft will ask if you wish to continue, click Connect
Manual setup
If the above steps do not work, you may have to manually setup your eduroam Wi-Fi.
- Click the Network icon in the toolbar (bottom left of the desktop)
- Check that Wi-Fi is on - if not, turn it on by clicking in the Wi-Fi box (the box will turn blue once it is on)
- Right click in the Wi-Fi box and click Go to settings
- Scroll down and click on Manage Wi-Fi settings
- Scroll to the bottom of the page. If there is a section called Manage known networks:
- Check if eduroam is listed
- If it is, click eduroam and click Forget
- Click the back arrow at the top left corner of the window
- Under Related settings, click Network and Sharing Centre
- Click Set up a new connection or network
- Click Manually connect to a wireless network and then click Next
- Enter the following settings:
Network name: eduroam Security type: WPA2-Enterprise Encryption type: AES Security key: Leave blank Tick ☑ - Start this connection automatically
Untick □ - Connect even if the network is not broadcasting - Click Next and then click Change connection settings
- Click on the Security tab and check that the settings match the following:
Security type: WPA2-Enterprise Encryption type: AES Choose a network authentication method: Microsoft: Protected EAP (PEAP) Tick ☑ - Remember my credentials for this connection each time I'm logged on - Click on the network authentication method Settings button
- Check that the settings match the following:
Trusted Root Certification Authorities:
Tick ☑ - Verify the server's identity by validating the certificate
Untick □ - Connect to these servers (examples:srv1;srv2;.*\.srv3\.com)Trusted Root Certification Authorities:
Tick ☑ any of the following. (You may not have them all listed).Tick ☑ - AddTrust External CA Root
Tick ☑ - Terena SSL CA
Tick ☑ - UTN-USERFirst-HardwareNotifications before connecting: Tell user if the server's identity can't be verified Select Authentication Method: Secured password (EAP-MSCHAP v2) Tick ☑ - Enable Fast Reconnect
Untick □ - Disconnect if server does not present crypto binding TLV
Untick □ - Enable Identity Privacy - Click on the Select Authentication Method Configure... button
- Untick □ - Automatically use my Windows logon name and password (and domain if any)
- Click OK and then click OK on the Protected EAP Properties window too
- Back in the eduroam Wireless Network Properties window, click Advanced Settings
- Check that the settings match the following:
Tick ☑ - Specify authentication mode Specify authentication mode: User authentication Untick □ - Enable single sign on for this network - Click on the Save credentials button and enter the following:
User name: Your full username Password: You usual password - Click OK and then click OK on the Advanced settings window too
- Click on the Connection tab of the eduroam Wireless Network Properties window
- Check that the settings match the following:
Tick ☑ - Connect automatically when the network is in range Untick □ - Look for other wireless networks while connected to this network Untick □ - Connect even if the network is not broadcasting its name (SSID) - Click OK and then click Close on the Manually connect to a wireless network window
- Close the Network and Sharing Centre window
- Back in the Network & Internet settings window, scroll to the top and click on eduroam
- Tick ☑ "Connect automatically" and and click Connect
- Microsoft will ask if you wish to continue, click Connect
Wi-Fi device settings for Linux
Steps:
- Click the Network icon in the System Tray and select eduroam
- Set Security: WPA2 Enterprise
- Set Authentication: Protected EAP (PEAP)
- Ensure Anonymous Identity is left blank
- Set CA Certificate: (None)
- Set PEAP Version: Version 0
- Set Inner Authentication: MSCHAPv2
- User name: full username
- Password: (your normal password)
- Click Connect
- (Tick) Don't warn me again
- Click Ignore
Wi-Fi device settings for Raspberry Pi
The following steps have been tested on a Pi 2 with an Edimax USB wireless dongle and a pI3 with Raspbian 'JESSIE'
Steps:
- Download the Root certificates and drop it into the folder /etc/wpa_supplicant:
sudo cp $HOME/Downloads/wirelessroot.cer /etc/wpa_supplicant/wirelessroot.cer
- Edit the file /etc/wpa_supplicant/wpa_supplicant.conf using vi, pico or whichever editor you like:
sudo vi /etc/wpa_supplicant/wpa_supplicant.conf
- Add to the file:
network={ ssid="eduroam" key_mgmt=WPA-EAP eap=PEAP identity="<Your full Username>" password="<Your usual Password>" phase2="auth=MSCHAPV2" ca_cert="/etc/wpa_supplicant/wirelessroot.cer" priority=999 }
- Save the file.
- Now you can test that it connects:
sudo wpa_supplicant -iwlan0 -c/etc/wpa_supplicant/wpa_supplicant.conf
- Check for any errors and fix them.
- Reboot yout pI:
sudo init 6
- The wireless should auto connect to eduroam.
Are there any conditions of use?
Yes, Use of our eduroam provision is subject to our TEN Group Conditions of Use, the JANET acceptable use policy (AUP) and the JANET eduroam Policy.
Use of eduroam is limited to current students and staff of member institutions.
It is an eduroam condition of use that users must remove the eduroam Wi-Fi profile from their mobile devices when their association with City College Norwich or other eduroam member institutions ends.
FAQ's: Alternative Guest Wi-Fi
How do I obtain Guest Wi-Fi access for my guests and visitors?
You can obtain guest IDs from reception. If you are organising a larger event with a number of visitors, we suggest you contact I.T. Services well in advance.
Is there a charge for using Guest Wi-Fi?
Why is a username required at all?
Usernames and passwords ensures that only official Staff, Student, guests and visitors to our institutes can use our Wi-Fi service.
Why isn’t my Guest Wi-Fi account working?
Your account may have expired and you will need to a new ID. All accounts currently expire 5 days after request.
Further Resources
For further information, please see the eduroam website.