VCU eduroam Wireless
What is Eduroam?
Eduroam is an international wireless roaming service designed for students, faculty, and staff. This wireless network provides internet access at any participating organization for all VCU affiliates with a valid wireless login. For more details about eduroam, please visit the websites below:
If I am on campus, should I use VCU SafeNet Wireless or eduroam?
While on campus, VCU users should continue to VCU SafeNet Wireless at this time. SafeNet provides access to certain internal resources (e.g., printing) that are not currently available on eduroam or VCU Guest Wireless.
The following services are permitted on the eduroam wireless network, per international recommendations:
|IPSec VPN (via NAT-T)|
|Cisco IPSec VPN over TCP|
|SMTP submits w/STARTTLS|
Automatic configuration is the recommended method to connect to the Eduroam wireless network. There are certain privacy and security features that cannot be manually be configured. If you have any questions about the content of the automatic installer, please contact the VCU IT Support Center. Use the following link for automatic configuration or scan the QR code on your mobile device. When prompted for your login credentials, be sure to include the @vcu.edu domain after your username:
Note: If your device not support automatic configuration, please use the following settings to connect to eduroam:
Security: WPA2 Enterprise
Encryption Type: AES (CCMP)
Authentication: Protected EAP (PEAP)
Inner Authentication: MS-CHAPv2
Outer Identity*: email@example.com
Trusted Authentication Servers: radius.cns.vcu.edu
CA Root**: AddTrust External CA Root (SHA1 Fingerprint: 02 FA F3 E2 91 43 54 68 60 78 57 69 4D F5 E4 5B 68 85 18 68)*This option MUST include the @vcu domain.**This certificate can be downloaded here.
Windows 7 Manual Configuration
From the 'Network and Sharing Center', choose 'Manage wireless networks' from the column on the right side of the screen:
Choose 'Add' to create a new wireless network:
Choose 'Manually create a network profile':
Enter eduroam for 'Network name', WPA2-Enterprise for 'Security type', and (optionally) check the box 'Start this connection automatically':
After the profile is created, choose 'Change connection settings':
Change to the 'Security' tab and choose 'Advanced settings' near the bottom of the window:
Check the box next to 'Specify authentication mode:' and select User authentication from the drop-down list, then choose 'OK' to return to the previous screen:
Microsoft: Protected EAP (PEAP) should already be selected for the authentication method and the 'Remember my credentials...' should already be checked. Choose 'Settings' next to these options:
Check the box next to 'Validate server certificate' and 'Connect to these servers:'. Enter radius.cns.vcu.edu as the trusted authentication server. Scroll through the Trusted Root CAs and check the box next to 'AddTrust External CA Root'. Check the box next to 'Do not prompt user...'. If the box next to 'Enable Identity Privacy' is not checked, check it and enter anonymous in the text box next to it. Choose 'Configure' next to the Authentication Method drop-down list:
Make sure that the check box on this window is not checked, then choose 'OK' until you are returned to the 'Network and Sharing Center':
Select the 'eduroam' SSID from your list of available networks and enter your eID followed by @vcu.edu when prompted. You MUST include the @vcu.edu or your authentication will fail:
OS X Manual Configuration
Warning: This method is not recommended as it leaves users open to certain vulnerabilities. Apple users should use the automatic configuration method at the top of this page.
Choose the 'eduroam' SSID from your list of available networks:
Enter your eID followed by @vcu.edu and your eID password:
You will be asked to verify the certificate used to authenticate our server. Choose 'Continue':
Enter your local password to confirm the certificate settings change: