Common connection issues
You cannot see any wireless network
Either your wireless card is configured incorrectly or you have not turned it on (many laptops have a button to turn on the integrated wireless card; you can also enable / disable the software).
This can also cause a technical problem on your device.
Exceptionally, you see some wireless networks but not eduroam. Your operating system does not support WPA2-Enterprise wireless networks (such as Amazon e-book readers), or this type of network does not support wireless card firmware (some old laptops). Try updating your operating system and wireless card drivers (usually from your laptop manufacturer or wireless card chip manufacturer).
Users from the University of Economics, Prague use the name in the form
where login is the user name used to log in to InSIS or the local computer network.
@ vse.cz denotes affiliation to VŠE (so-called realm).
|Wrong name example||Description|
|xkrum72||missing @vse.cz – the most common problem,|
|firstname.lastname@example.org||Instead of @vse.cz is stated incorrect @insis.vse.cz,|
|apartman||missing @vse.cz, we do not have such a username at school,|
|Xduds09@Vse.cz||capital letters in the name, they can’t even be in realm,|
|email@example.com@vse.cz||realm @vse.cz twice listed, maybe filled the login domain as well
|xstaj73 [at] vse.cz||misspelled @, assumed display method used in InSIS,|
|firstname.lastname@example.org||an e-mail address is provided instead of login,|
|xpoki16@vsecz||missing dot between mezi vse and cz in realm, sometimes there is a dot
or a gap (a gap at the end is a problem on Android),
|VSE.CZ\\xmrum11||This applies to Windows – domain has been entered in the
login dialog, the domain must not be filled in
|EDUROAM\\email@example.com||This applies to Windows – domain has been entered in the login dialog,
the domain must not be filled
For eduroam a special password is used, which you set / change at https://eduroam.vse.cz/heslo/.
Most devices will store the password, so there is no need to enter it more than once. If you do not use VPN, you do not need to remember the password – generate it in your password manager.
You can change the password at any time on the page to set it. After changing your password, be sure to adjust the settings on all your devices.
User without access to eduroam
Active students, active employees and most active external roles have access to eduroam.
The entitlement ends on the second day after the loss of the claim – after graduation, termination of employment agreement, etc. On termination of the claim, delete eduroam configuration from your devices.
Students with interrupted studies also do not have access to eduroam, as they are not students under the University Act.
You can verify your claim in InSIS – after logging in, select the Account Management application in the Technology group and their management. You should find the eduroam server in the list.
Problem with certificate
Certificates are used to verify that you are subscribing to an official eduroam network – you cannot simply prevent various fraudsters from promoting a fake eduroam network. The certificate is used to authenticate the authorization server – when logging into the eduroam network, the computer first requests the authorization server certificate. It then checks whether the certificate is signed by the correct certification authority – if so, then only the encrypted tunnel is created and the password for authentication is sent to the authorization server.
At the University of Economics, the authorization server radius.vse.cz is signed by DigiCert Assured ID Root CA. Each device should indicate that it will only trust the certificate from that certification authority.
The problem occurs when a user has checked another CA or selected the wrong authorization type in the connection configuration (we support two types: EAP-TTLS and EAP-PEAP / Microsoft PEAP).
A different name inside the tunnel
During configuration, you can enter two login names – external (anonymous) identity is used for routing to the authentication server, internal identity is used for password authentication.
Android operational system uses Identity (internal identity) and Anonymous identity (external identity), Windows uses User Name (internal identity) and Roaming Identity (external identity).
Both identities must be the same, respectively, firstname.lastname@example.org can be used as external.
If you do not fill out the external identity (recommended), the value from the internal identity is automatically used.
Log in as a computer
This applies only to Microsoft Windows. The operating system first attempts to log on under the computer name (e.g. host/Věruš-PC, host/wolfik-PC or host/asus-eee-pc) and only then with the specified username and password. This creates a delay of about 5-10 seconds when connecting to the eduroam network.
In the wireless network configuration, clear the Automatically use the login and password to log on to Windows.
On older Windows laptops, this can be caused by the old wireless card driver. Check your notebook manufacturer for newer drivers for your model.
On laptops and on mobile phones, this can cause the wireless adapter to go into power saving mode. In Windows, you can try turning off “Powering off your device to save power” in the wireless adapter driver options.
Another reason could be very aggressive roaming. The device usually has multiple access points within range and chooses the one with the strongest signal. The wireless adapter continuously monitors the signal strength. When changes in space (for example, a person passes through), the signal strength from each access point changes, and the computer may try to switch to another access point. In Windows, you can adjust the roaming aggressiveness, see In Windows, you can adjust the roaming aggressiveness, see the article Setting Roam Aggression on Windows Computers.
Frequent disconnection may be caused by the notebook overheating. If you have an older notebook and its bottom is hot when you use it, try to clean it from dust.