Skip to sub-navigation Skip to content Skip to footer

VCU eduroam Wireless

What is eduroam?

Eduroam is an international wireless roaming service designed for students, faculty, and staff. This wireless network provides internet access at any participating organization for all VCU affiliates with a valid wireless login. For more details about eduroam, please visit the websites below:

https://www.eduroam.us/

https://www.eduroam.org/

If I am on campus, should I use VCU SafeNet Wireless or eduroam?

While on campus, VCU users should continue to VCU SafeNet Wireless at this time. SafeNet provides access to specific internal resources (e.g., printing) that are not currently available on eduroam or VCU Guest Wireless.

Permitted Services

The following services are permitted on the eduroam wireless network, per international recommendations:

OpenVPN 2.0

IPSec VPN (via NAT-T)

Cisco IPSec VPN over TCP

SSH

HTTP

HTTPS

IMAP2+4

IMAP3

IMAPS

POP

POP3S

Passive (S)FTP

SMTPS

SMTP submits w/STARTTLS

RDP

Automatic Configuration

Automatic configuration is the recommended method to connect to the Eduroam wireless network. Certain privacy and security features cannot be manually be configured. If you have any questions about the content of the automatic installer, please contact the VCU IT Support Center. Use the following link for automatic configuration or scan the QR code on your mobile device. When prompted for your login credentials, be sure to include the @vcu.edu domain after your username:

VCU eduroam Configuration Assistant Tool

General Settings

Note: If your device does not support automatic configuration, please use the following settings to connect to eduroam:

SSID: eduroam

Security: WPA2 Enterprise

Encryption Type: AES (CCMP)

Authentication: Protected EAP (PEAP)

Inner Authentication: MS-CHAPv2

Outer Identity*: anonymous@vcu.edu

(Inner) Identity*: eID@vcu.edu

Trusted Authentication Servers: radius.cns.vcu.edu

CA Root**: AddTrust External CA Root (SHA1 Fingerprint: 02 FA F3 E2 91 43 54 68 60 78 57 69 4D F5 E4 5B 68 85 18 68)

_{*This option MUST include the @vcu domain.}

_{**The certificate can be downloaded here.}

Windows 7 Manual Configuration

Step 1

From the 'Network and Sharing Center,' choose 'Manage wireless networks' from the column on the right side of the screen:

Step 2

Choose 'Add' to create a new wireless network:

Step 3

Choose 'Manually create a network profile':

Step 4

Enter eduroam for 'Network name,' WPA2-Enterprise for 'Security type,' and (optionally) check the box 'Start this connection automatically':

Step 5

After creating your profile, choose 'Change connection settings':

Step 6

Change to the 'Security' tab and choose 'Advanced settings' near the bottom of the window:

Step 7

Check the box next to 'Specify authentication mode:' and select User authentication from the drop-down list, then choose 'OK' to return to the previous screen:

Step 8

Microsoft: Protected EAP (PEAP) should be selected for the authentication method, and the 'Remember my credentials...' should already be checked. Choose 'Settings' next to these options:

Step 9

Check the box next to 'Validate server certificate' and 'Connect to these servers:.' Enter radius.cns.vcu.edu as the trusted authentication server. Scroll through the Trusted Root CAs and check the box next to 'AddTrust External CA Root.' Check the box next to 'Do not prompt user...'. If the box next to 'Enable Identity Privacy' is not checked, check it and enter anonymous in the text box next to it. Choose 'Configure' next to the Authentication Method drop-down list:

Step 10

Make sure that the checkbox on this window is unchecked. Choose 'OK' until you are returned to the 'Network and Sharing Center':

Step 11

Select the 'eduroam' SSID from your list of available networks and enter your eID followed by @vcu.edu, when prompted. You MUST include the @vcu.edu, or your authentication will fail:

OS X Manual Configuration

Warning: This method is not recommended as it leaves users open to vulnerabilities. Apple users should use the automatic configuration method at the top of this page.

Step 1

Choose the 'eduroam' SSID from your list of available networks:

Step 2

Enter your eID followed by @vcu.edu and your eID password:

Step 3

You will be asked to verify the certificate used to authenticate our server. Choose 'Continue':
[View Image]

Step 4

Enter your local password to confirm the certificate settings change:

View graphic version