VCU eduroam Wireless

What is Eduroam?

Eduroam is an international wireless roaming service designed for students, faculty, and staff. This wireless network provides internet access at any participating organization for all VCU affiliates with a valid wireless login. For more details about eduroam, please visit the websites below:

If I am on campus, should I use VCU SafeNet Wireless or eduroam?

While on campus, VCU users should continue to VCU SafeNet Wireless at this time. SafeNet provides access to certain internal resources (e.g., printing) that are not currently available on eduroam or VCU Guest Wireless.

Permitted Services

The following services are permitted on the eduroam wireless network, per international recommendations:

OpenVPN 2.0
IPSec VPN (via NAT-T)
Cisco IPSec VPN over TCP
Passive (S)FTP

Automatic Configuration

Automatic configuration is the recommended method to connect to the Eduroam wireless network. There are certain privacy and security features that cannot be manually be configured. If you have any questions about the content of the automatic installer, please contact the VCU IT Support Center. Use the following link for automatic configuration or scan the QR code on your mobile device. When prompted for your login credentials, be sure to include the domain after your username:

VCU eduroam Configuration Assistant Tool

General Settings

Note: If your device not support automatic configuration, please use the following settings to connect to eduroam:

SSID: eduroam

Security: WPA2 Enterprise

Encryption Type: AES (CCMP)

Authentication: Protected EAP (PEAP)

Inner Authentication: MS-CHAPv2

Outer Identity*:

(Inner) Identity*:

Trusted Authentication Servers:

CA Root**: AddTrust External CA Root (SHA1 Fingerprint: 02 FA F3 E2 91 43 54 68 60 78 57 69 4D F5 E4 5B 68 85 18 68)

*This option MUST include the @vcu domain.
**This certificate can be downloaded here.


Windows 7 Manual Configuration

Step 1

From the 'Network and Sharing Center', choose 'Manage wireless networks' from the column on the right side of the screen:

Step 2

Choose 'Add' to create a new wireless network:

Step 3

Choose 'Manually create a network profile':

Step 4

Enter eduroam for 'Network name', WPA2-Enterprise for 'Security type', and (optionally) check the box 'Start this connection automatically':

Step 5

After the profile is created, choose 'Change connection settings':

Step 6

Change to the 'Security' tab and choose 'Advanced settings' near the bottom of the window:

Step 7

Check the box next to 'Specify authentication mode:' and select User authentication from the drop-down list, then choose 'OK' to return to the previous screen:

Step 8

Microsoft: Protected EAP (PEAP) should already be selected for the authentication method and the 'Remember my credentials...' should already be checked. Choose 'Settings' next to these options:

Step 9

Check the box next to 'Validate server certificate' and 'Connect to these servers:'. Enter as the trusted authentication server. Scroll through the Trusted Root CAs and check the box next to 'AddTrust External CA Root'. Check the box next to 'Do not prompt user...'. If the box next to 'Enable Identity Privacy' is not checked, check it and enter anonymous in the text box next to it. Choose 'Configure' next to the Authentication Method drop-down list:


Step 10

Make sure that the check box on this window is not checked, then choose 'OK' until you are returned to the 'Network and Sharing Center':

Step 11

Select the 'eduroam' SSID from your list of available networks and enter your eID followed by when prompted. You MUST include the or your authentication will fail:

OS X Manual Configuration

Warning: This method is not recommended as it leaves users open to certain vulnerabilities. Apple users should use the automatic configuration method at the top of this page.

Step 1

Choose the 'eduroam' SSID from your list of available networks:

Step 2

Enter your eID followed by and your eID password:

Step 3

You will be asked to verify the certificate used to authenticate our server. Choose 'Continue':

Step 4

Enter your local password to confirm the certificate settings change: