INFORMATION SERVICES DIVISION (ISD)

NETWORK SERVICES GROUP

JRS eduroam (PEAP) Microsoft Windows 7 User Guide

Version Date Author Document Details Last Updated

3.0 01st June 2010 MC & PM N/A 20 October 2011

Page 1 of 9

Table of Contents
JRS eduroam (PEAP) Microsoft Windows 7 User Guide .............................................................. 1 Table of Contents ...................................................................................................................... 2 Revision History ........................................................................................................................ 2 Formatting Conventions ........................................................................................................... 2 0 Introduction ........................................................................................................................ 3 1 Getting Connected ............................................................................................................. 3 1.1 Requirements ................................................................................................................ 3 1.2 Configuring eduroam .................................................................................................... 4
1.2.1 Configuring eduroam with WLAN AutoConfig ........................................................................ 4

Help and Support .................................................................... Error! Bookmark not defined. 2.1 802.1X Cached Credentials Workaround ...................................................................... 8

Revision History
Date 01st June 2010 01st June 2010 01st June 2010 14th June 2010 23rd August 2010 20th September 2010 21st February 2011 22nd February 2011 20th October 2011 Version 0.1 0.2 0.3 0.4 1.0 2.0 2.1 2.1.1 3.0 Author MC PM PM PM MC PM PM PM PM Purpose Original draft version Minor format changes Minor corrections Updated Help and Support. Re-written for eduroam SSID Corrections for continuity and final release Added 802.1X Advanced workaround Minor corrections Updated for WPA2 Enterprise/ AES encryption cipher

Formatting Conventions
Courier New Italic Underline or Bold Implies an action A variable which must be replaced or for emphasis Important note or action

JRS eduroam (PEAP) Microsoft Windows 7 User Guide Page 2 of 9

Introduction
The purpose of this document is to provide Microsoft Windows 7 users with instructions for connecting to the JANET Roaming Service (JRS) eduroam

Getting Connected
The JANET Roaming Service (JRS) at University College London is advertised via the eduroam wireless network and secured using IEEE 802.1x/ EAP-PEAP authentication. SSID Encryption Cipher Authentication Method Authentication Protocol eduroam WPA2 Enterprise/ AES IEEE 802.1x
EAP-PEAP (Extensible Authentication Protocol Protected EAP)

1.1

Requirements The following is required to connect to the JRS eduroam service at UCL. A UCL User ID and password. certified Wireless Network Connection adapter. The Wi-Fi Alliance can be used A to check to see if your product is certified.

JRS eduroam (PEAP) Microsoft Windows 7 User Guide Page 3 of 9

1.2

Configuring eduroam By default Windows 7 has a built-in wireless configuration service (WLAN AutoConfig), this guide is written specifically for this service. To check if this service is enabled, follow the instructions below: Start > Control Panel > Network and Sharing Centre (icon) > Manage Wireless Networks (under tasks on the left pane). If a list of Wireless Networks is displayed (including eduroam) the WLAN AutoConfig service is enabled. If the WLAN AutoConfig service is enabled you need to refer to the Configuring eduroam with WLAN AutoConfig section. If the Wi-Fi connection is managed by other software you need to identify which client is managing the wireless. This can typically be done by identifying the applications running in the taskbar. Once identified you need to refer to the manufacturer for information on 802.1X EAP PEAP support and configuration instructions. In this instance, the remainder of this document should be used for reference only!

1.2.1

Configuring eduroam with WLAN AutoConfig The PEAP authentication method is built into the Windows 7 operating system. Configure Windows Wireless Manager 1. Open the properties window of your Wireless Adapter. Select (Windows) Start > Control Panel > Network and Internet (icon) > Network and Sharing Centre (icon) > Manage Wireless Networks (under tasks on the left pane). 2. If the eduroam Network is displayed in the list of available Networks, highlight and select the - Remove button. 3. Select the + Add and Manually create a network profile.

The manually connect to a wireless network configuration Window is displayed.

JRS eduroam (PEAP) Microsoft Windows 7 User Guide Page 4 of 9

Network name (SSID) Security Type Encryption Type Security Key Passphase Start this connection automatically Connect even if the network is not broadcasting

eduroam WPA2-Enterprise AES Field disabled Enabled Disabled

Click Next to add the eduroam Network.

Select the Change connection settings option. This displays the properties window for the eduroam Wireless Network

Select the Security tab. From the Choose a network authentication method: select the entry Microsoft: Protected EAP (PEAP). Select the Settings button. A User Account Control window may be displayed. Select Allow to proceed.

JRS eduroam (PEAP) Microsoft Windows 7 User Guide Page 5 of 9

Configure PEAP the PEAP Properties window is displayed. Set the options as follows: Validate server certificate Connect to these servers: Trusted Root Certification Authorities Do not prompt user to authenticate Select Authentication Method: Select the Configure button Ticked orps.jrs.ucl.ac.uk Tick GTE CycberTrust Global Root * Un-ticked

Secured password (EAP-MSCHAP v2)

IMPORTANT

Enable Fast Reconnect Enforce Network Access Protection Disconnect if the server does not present cryptobinding TLV Enable Identity Privacy

Un-tick Automatically use my Windows logon name and password (and domain if any) Ticked Un-ticked

Un-ticked

Un-ticked

Repeatedly click the OK button to complete the configuration Connect to eduroam When within wireless range of the eduroam service, a Windows Security box will appear asking for Network Authentication. Click on this bubble to display the authentication window. If this doesnt happen, when in range of the eduroam service, click on the wireless icon in the Windows task bar and select eduroam from the list of networks. Then click the connect button.
JRS eduroam (PEAP) Microsoft Windows 7 User Guide Page 6 of 9

Set User name to your UCL userid and password. Your UCL userid must be appended with @ucl.ac.uk. e.g. zcxxano@ucl.ac.uk Set Password to your UCL password.

You will now be connected to the eduroam service, from where you can access UCL Network Resources (e.g. Email) and the Internet.

JRS eduroam (PEAP) Microsoft Windows 7 User Guide Page 7 of 9

Help and Support

The Wireless Support Team can be emailed at wireless-support@ucl.ac.uk.

2.1

802.1X Cached Credentials Workaround An automatic update to Windows 7 introduced an advanced setting. As a result of the update you may be constantly prompted for your credentials (i.e. ULC userid & password) when attempting to join eduroam. The following is a known workaround to this issue. Please note; we are currently unaware of when the automatic update was introduced and the behaviour of the update when your UCL password is changed. If you encounter problems when changing your password, please check for an update to this documentation. Open the Network and Sharing Center. Click on Manage Wireless Networks from the left-hand pane. A list of configured wireless Networks will be displayed. Highlight eduroam and right-click. Select Properties from the context menu. Select the Security tab. A window similar to the illustrated is displayed. Select the Advanced settings button.

Ensure the Specify option is ticked.

authentication

mode

From the drop-down select authentication. Next select the credentials button.

User Save

JRS eduroam (PEAP) Microsoft Windows 7 User Guide Page 8 of 9

Set User name to your UCL userid and password. Your UCL userid must be appended with @ucl.ac.uk. e.g. zcxxano@ucl.ac.uk Set Password to your UCL password. Click OK to all windows to save the settings.

JRS eduroam (PEAP) Microsoft Windows 7 User Guide Page 9 of 9