skip to content

Configuring eduroam Wi-Fi access in Windows manually

Note: There are a few configuration differences between Windows versions. 

  • Open the "Manage wireless networks” control panel task.
    Windows 7: Click the Windows logo and type "Wireless Network" and select "Manage Wireless Networks".
    Windows Vista: Click the Windows logo and click "Networks". In the newly opened window, select "Network and Sharing Center" (near the top) and click "Manage wireless networks" in the new window on the left.
  • Click "Add" above the list of already configured wireless networks. On Windows Vista, the button is marked with a green "+" symbol.
  • Select "Create a network profile manually".

  • Enter the following settings here:

    • Network name: eduroam
    • Security: WPA2-Enterprise
    • Encryption type: AES

  • Click "Next".
  • Select "Change connection settings":
  • Select the "Security" tab.
  • Select "Microsoft: Protected EAP (PEAP)" under "Network Authentication Method".
  • Click "Settings".
  • Enter the following settings as shown in the screenshot:
    Check the box "Connect to these servers".
    In the field below enter: radius1.rrz.uni-koeln.de;radius2.rrz.uni-koeln.de (in exactly this notation).
    Check Deutsche Telekom Root CA 2 under Trusted Root Certification Authorities.
    Enable the option “Do not prompt user to authorize new servers or trusted certification authorities".
    Windows 7/8: Check "Enable identity privacy" check box and enter anonymous in the field next to this option.
Screenshot: Konfiguration der EAP-MSCH
  • Click "Configure".
  • Uncheck "Automatically use your own Windows logon name and password (and domain, if any)".

Now close all windows that have opened during this process by clicking on "OK" or "Close".
Next steps:

Registering for Wi-Fi access for the first time and using Wi-Fi

Contact
If you have any questions or problems, please contact the RRZK-Helpdesk