Zentrum für Datenverarbeitung (ZDV)

Configuration instructions eduroam

Windows 10

There are two ways to configure eduroam under Windows 10:

  • Use the configuration profile provided by the ZDV with the associated installation script.
  • Set up the eduroam access manually via the Windows interface.
Older Windows versions

Both variants work with older versions in the same way as Windows 10. The dialogues and descriptions displayed there may differ.

Automatic configuration

with profile and installation script

  • Load the ZIP file with the configuration profile (an XML file) and the installation script (a BAT file) onto your computer.
  • Unzip the ZIP archive with the two files in a separate folder (e.g. C:\temp\eduroam).
  • Run the eduroamConfigure.bat script (either start it in a command line window or double-click the file icon in Windows Explorer).
  • Now establish a connection to the Wifi with SSID "eduroam" and enter your Login-ID@uni-tuebingen.de and your password when connecting.
Security

For a secure set-up of eduroam, some settings and in particular the selection of the correct certificate must be made. All of this is taken into account in the automatic configuration. For manual configuration, you must therefore follow the specified steps exactly. If you don't do this, you could end up with a working but unsafe configuration.

Manual configuration

via the Windows interface

Right-click the network icon in the status bar on the desktop and select "Open Network & Internet settings" from the context menu.

In the dialog that appears, click on "Network and Sharing Center".

In the next dialog, click on "Set up a new connection or network".

 

In the next dialog, select "Manually connect to a wireless network" and click "Next".

 

Fill in the input fields.
     Network name: eduroam
     Security type: WPA2-Enterprise

Click "Next".

Make sure to select "Change connection settings".

 If you select "Close" contenteditable="false" at this point, the connection establishment is unsafe. Your access data (login ID and password) could be intercepted.

In the dialog that appears, switch to the "Security" tab.

 

Open the "Settings".

 

Activate the "T-TeleSec GlobalRoot Class 2" entry in the "Trusted Root Certification Authorities" area.

Activate "Disconnect if server does not present cryptobinding TLV".

Confirm and close all open dialog windows one after the other by clicking on "OK" or "Close".

Left-click on the network symbol in the status bar on the desktop.

Select the network "eduroam" and click on "Connect".

Enter your user ID "login-ID@uni-tuebingen" and your password and click "OK".