Eduroam Configuration

Windows 10 and 11

If your laptop uses Windows Vista, Windows 7, Windows 8 / 8.1, Windows 10 or Windows 11, click in the link below to download the program that will configure the Eduroam network for you. Run the program and confirm every question.

Install - Windows 7, 8, 8.1, 10, 11 and Vista SP2

Next, everytime your network card detects the eduroam network, you will be asked for your credentials:

Here you should fill with your email "username@ualg.pt" and your password. Click "OK" and after some time you should receive a message that you are connected to the UAlg Network. When connected to eduroam the network connections icon should look similar to the pictures below.

In Windows 10:

In Windows vista:

Mac OS (Apple Computers)

Installation with the new certificate for Apple (download - Ctrl+Mouse)

Linux using Network Manager (Ubuntu, Debian, Mint, Fedora, Arch btw)

With graphical interface (GUI)

Ubuntu (tested in 8.10, 11.10 e 14.10), Fedora (tested from 10 to 14), CentOS, Redhat, using NetworkManager

1. Download the certificate.

2. Select eduroam wireless network from the list of available networks.

3. Fill the fields as the image below. The image is taken from Ubuntu 14.10, but the fields should look very similar across different versions.

WARNING: You must choose PEAP e MsCHAPv2. The certificate should be ualg-eduroam-ca-2014.der

username@ualg.pt is your UAlg email.

Via console (nmcli)

Tested in Artix Linux 5.19.10 / 6.0.1 with NetworkManager 1.40.0-1 and Arch Linux 6.0.12 with NetworkManager 1.40.8-1

1. Download the certificate. Save it in a safe directory because you will need to keep it as long as you use eduroam.

2. Open a terminal and execute the command:

$ nmcli con add type wifi con-name eduroam ssid eduroam

3. Once the connection is created it is necessasry to configure the authentication via the command:

$ nmcli con edit id eduroam

Where it should start the nmcli prompt, where you shoud put:

nmcli> set ipv4.method auto
nmcli> set 802-1x.eap peap
nmcli> set 802-1x.phase2-auth mschapv2
nmcli> set 802-1x.identity axxxxx@ualg.pt
nmcli> set 802-1x.anonymous-identity axxxxx@ualg.pt
nmcli> set 802-1x.password ********
nmcli> set 802-1x.ca-cert /home/user/Certs/ualg-eduroam-ca-2014.der
nmcli> set wifi-sec.key-mgmt wpa-eap
nmcli> save
nmcli> quit

Replacing axxxxx@ualg.pt with your UAlg email address, and ******** with your password.

Also replace /home/user/Certs/ualg-eduroam-ca-2014.der with the absolute path to the certificate you just downloaded in the first step.

4. Lastly, activate the connection:

$ nmcli con up eduroam

You should receive a success message.

Android Phones and Tablets (Samsung, Huawei, Xiaomi, LG, Asus, Nokia, Lenovo, etc)

Examples shown are from a Huawei P10 Lite and a Google Pixel 6a

Download the certificate.
The next step is to install the certificate

Some phones like Huawei P10 will automatically ask to install the certificate after the download. If that is your case, make sure to give it the name eduroam1 and mark it as a WI-FI certificate.

If nothing happens in your phone after the download, go to Settings, search for " Cert " and select WI-FI Certificate (or WLAN Certificate in other phones).

Then select the downloaded certificate.

And give it the name eduroam1
Go to WI-FI connections, press over eduroam and click connect. Next you will need to configure the following options
- EAP method: PEAP
- Phase 2 authentication: MSCHAPv2
- CA certificate: select eduroam1, the certificate that we created in the last steps
- Online Certificate Status: Do not verify
- Domain: ualg.pt, but some phones might not ask for the domain
- Identity and Anonymous identity: your UAlg email. For students it should be axxxxx@ualg.pt, replacing xxxxx with your number
- Password: your UAlg password. Make sure that the password is correct because some phones might misleading tell that the configuration is incorrect when using a wrong password.
- All other options should be ignored
Finally click Connect and wait a few seconds. If every step was done correcly, you should see connected below the eduroam network.

iPhone and iPad

Download the certificate
If you have a Apple Watch connected, click iPhone/iPad
Make sure the profile is downloaded and click close
Go to the settings and click on profile
Click install ...

... and then install again. At this step you might need to input your phone pin
Fill the field with your UAlg email (for students axxxxx@ualg.pt replacing xxxxx with the student number) and press next
Next insert your UAlg password and click connect
After all these steps, the iPhone should be connected to eduroam. Check in the WI-FI settings if is the case. If is not you can click in eduroam and it should connect to the network.

ChromeBook

Download the certificate. In the example below we saved the certificate in the Downloads folder.
Next open the Chrome browser and go to the settings. Then search for "certificate" and select Security.
Select Manage certificates ...

... and select the downloaded certificate ...

... check the 3 options and click ok.
Connect to the eduroam and fill the following fields:
- EAP method: PEAP
- EAP Phase 2 authentication: MSCHAPv2
- Server CA certificate: select the certificate that was downloaded before in the first step
- Domain: ualg.pt
- Identity and Anonymous identity: your UAlg email. For students it should be axxxxx@ualg.pt, replacing xxxxx with your number
- Password: your UAlg password.
Click connect and now you should be connected to the Eduroam network

Manual Configuration (Windows Phone and other devices)

If your device is not found in the list of supported devices by the IT services, you can choose to configure it manually, taking however full responsibility through out the process.

You should install the the most recent certificate, using the most suitable format for you operating system, DER (windows), PEM (android and others) or CRT (android and others) or CER (windows phone), and select it in the configuration.

Only this way is guaranteed that your credentials are sent to the correct server and not to a pirate website.
Antenna Link: Security WPA2 Enterprise, AES Encryption
Connection to Authentication Server: PEAP
User to use in Authentication Server (outer): ualg email (ex: axxxxx@ualg.pt)
Server Authentication of eduroam: Certificate chosen depending of the operating system
Sent credentials to server: MSCHAPv2
User authentication (inner): ualg email (ex: axxxxx@ualg.pt) and your password

Some technical notes:

The use of protocols (WPA2, TTLS, PEAP, etc) needs to be complied at a national level in order to roaming to work properly, that is, if you visit another Portuguese University you should be able to connect without changing the configuration.

This is valid at a worldwide level for universities that comply, however the protocols used can be slightly different, requiring to change some settings (WPA to WPA2, etc).

When you enter with your UAlg account outside UAlg, your credentials are sent to our server encrypted to authenticate, passing through many servers, and because of that its very important the installation and confirmation of the server certificate.

Windows XP

If you have SP3 installed, click in the link "Install" that will configure the eduroam network. You should answer affirmatively to all the questions and install the presented certificate. If you don't have SP3 installed, then install the other options below accordingly to your case.

If you experience problems installing, try installing the patch(you need Service Pack 2 installed) for Windows XP(In Portugu�s, In English). It will require to reboot the computer after installation.

Intel(R) PRO/Wireless 3945ABG wireless cards require configuration. To verify if your laptop has one follow this link.

Intel(R) PRO/Wireless 3945ABG card configuration

1.

To verify that your wireless card goto "Network Connections", as shown in the figure.

2.

In the opened window can be checked the manufacture and model of your wireless card. If your card is not an Intel 3945ABG, then you don't need do the next steps.

3.

Goto properties you wireless card properties, as shown in the picture above.

4.

It's now necessary to access the advanced configuration of your Intel 3945ABG, by clicking in the marked button.

5.

(1)In the "Properties" box, choose the "Wireless mode" (or similar); (2) Uncheck the "Use default value" (or similar) square to enable the selection below; (3) Choose in the selection box the option "802.11b and 802.11g". Click "OK" for all windows.

Close (X)

If you can't connect to the eduroam network, you should remove eduroam-install from the list of available networks.

Remove eduroam-install

1.

To remove theeduroam-install network from your list of available networks, goto properties of your wireless card, and do the following changes:

2.

To access the properties of your card execute the steps described above.

3.

Go to the tab "Wireless networks". Select "eduroam-install" inside the "Preferred networks", and click the "Remove" button to delete the network from the list. Click "OK" to close all windows.

After the last step you will asked for your credentials login@ualg.pt/password of UAlg domain, so that you can connect to the eduroam network.

Mac OS X Tiger (Leopard and Snow Leopard are similar)

Tested in Mac OS X version 10.4.11.

Goto Open Internet Connect in the Airport icon (as shown in the picture).

Click Edit configurations to get to the next window.

1. Fill the marked fields inside the red rectangle. In User Name you should replace "utilizadorUALG" with your username (in case of student, it will be like: a12345) and use your passwordfor email of UAlg.

2. Click the button Configure. In the window that opens (next figure), choose PAP and fill Outer Identity exactly the same way as User Name.

You will be asked if you trust the certificates. To avoid the system asking confirmation everytime you connect to the network, you should click in Show Certificate ...

... and then in Always trust these certificates.

Finally, click Ok or Continue for all windows until you get into the window in the picture below. After that, click Connect to connect to eduroam.

It will appear the confirmation that you connected at the bottom of the window, as shown in the next figure.

Welcome to the University of Algarve Wireless Network