Windows 10 – eduroam configuration

Basic information

Windows 10 can detect wireless network parameters and the first login to eduroam is easy for the user. No authentication server check – automatic configuration is not secure.

The created configuration can only be edited manually if you are in range of eduroam. The eduroam Configuration Assistent Tool (eduroamCAT) is an easier way. The application will also help in causa of connection problems, unless it is caused by a wrong username or password.

The password for eduroam is different from the password for school systems. You can set or change it to https://eduroam.vse.cz/password/.
If you’re unable to connect, check out the most common connectivity issue.

Configuration using eduroamCAT

From cat.eduroam.org download the application which contains parameters for connecting users from the University of Economics (see Vysoká škola ekonomická v Praze/Prague University of Economics and Business).
Run this application – the program will delete the original eduroam configuration and then set all parameters except the username and password. You enter these only when you first connect to eduroam after configuration.

You can also download and run the application outside of the eduroam network, eg in your home network.

If you are not able to connect to eduroam (or other wireless networks) after CAT configuration, try restarting your operating system.

Simple first connection

These are a few simple steps that are shown in the following figures.

  1. Click the wireless icon on the Start bar at the bottom right. You will see a list of available wireless networks:

  2. Select eduroam and click Connect.

  3. In the following fields fill in your username (in the format username@vse.cz, do not forget @ vse.cz) and password. Click OK to continue.

  4. Confirm the connection with the Connect button.

  5. If the connection is successful, you will see the following table confirming the successful connection.

This configuration is not secure – authentication server authentication is not set. Either download the configuration application from cat.eduroam.org or continue with the following steps.

Manual adjustment of the existing configuration

You must be connected to eduroam for manual editing.

  1. Click the second mouse button on the wireless network icon at the bottom of the toolbar.

Select Open Network and Sharing Center from the menu.

  1. In the top right part you will see information that you are connected to eduroam. Click the Wi-Fi (eduroam) link. On the next screen, select Wireless Properties.

  2. The same window as in point 3 of the following instructions will be displayed. Continue with steps 4 and 5.

Configuration outside eduroam network

You can also configure the wireless network outside the range of the eduroam network (e.g. at home). You can use the application downloaded from eduroamCAT (preferred option), it can be set manually.
You can only configure new networks outside the wireless network range. If you already have eduroam in the list of known networks, you must first cancel it.

  1. Click the wireless icon on the bottom bar with the second mouse button. A pop-up menu appears and select Open Network and Sharing Center:

  2. Now select Set up a new connection or network, then Manually connect to a wireless network and a screen for entering the network name and type will appear. Enter eduroam and select WPA2-Enterprise.

  3. Press Next to create the eduroam network foundation. On the next screen it is necessary to choose Change connection settings and in the resulting window switch to the Security tab:

  4. The PEAP authentication method is selected approximately in the middle and the Settings button next to it. Click on it and on the following screen it is necessary to type the name of the authentication server radius.vse.cz and select the USERTrust RSA Certification Authority. Make sure both options at the top are checked.

  5. Click Configure for password security and make sure that the option to log on with your Windows login and password is not checked.

  6. Go back and confirm with OK to save the settings.

  7. Within range of the eduroam network, the computer will attempt to connect. You will be asked for your name (do not forget to enter @ vse.cz) and password.

If you are not prompted for a username and password, restart your operating system. If that doesn’t help, you probably made a mistake somewhere in the configuration. You need to cancel the configuration and recreate it.

Microsoft EAP-TTLS authentication method

The PEAP authentication method is used in the above mentioned instructions. You can also use the Microsoft EAP-TTLS protocol, where the parameters are set on one screen.

  1. Choose the Microsoft EAP-TTLS authentication method

  2. On the following screen, you can enter the anonymous identity anonymous@vse.cz at the top. Then enter the name of the authentication server (radius.vse.cz), check the USERTrust RSA Certification Authority certificate and check other information as shown in the picture: