Best Practice - Android


For Android devices we recommend the configuration via EAP-PWD.

Authentication using EAP-PWD is a secure and quickly configured authentication option.

Certificates or other settings are not required:

 Setup using EAP-PWD

 

 

Icon

Please use eduroam Devicemanager to generate eduroam credentials for every device in use. You will find a tutorial here: https://doc.itc.rwth-aachen.de/x/RQTuAQ. You'll need them to authenticate in step 2.

Please note that login names generated with the help of eduroam Devicemanager will end with @rwth.edufi.de for members of the RWTH Aachen University and with @fzj.edufi.de for the members of the FZ Jülich.

You can still access the institute WLAN using a login name that ends with @rwth-aachen.de.

Step 1: Choose WLAN


Go to the settings and select "WLAN" in the 'Network & Internet' section.

Step 2: Enter configuration


Select the eduroam network and make the following settings:

Icon

With the authentication method EAP-PWD no certificate is necessary and also not possible.

Icon

Sometimes a space will be added to your input if you are using the AutoFill feature, depending on your android keyboard. This added space must then be removed again.

Then you can connect to eduroam by clicking "Connect".

Manual setup - Android


Alternatively, you can configure the system using the eduroam CAT App for Andorid or manually using the authentication method EAP-MSCHAP-V2:

 

 Setup via eduroam CAT App

Icon

Please use eduroam Devicemanager to generate eduroam credentials for every device in use. You will find a tutorial here. You'll need them to authenticate in step 3.

Please note that login names generated with the help of eduroam Devicemanager will end with @rwth.edufi.de for members of the RWTH Aachen University and with @fzj.edufi.de for the members of the FZ Jülich.

You can still access the institute WLAN using a login name that ends with @rwth-aachen.de.

Step 1: Open settings and connect to RWTH-guests


 

Mobile radio and RWTH-guests

Icon

If you are in the mobile network and have data volume, a connection with RWTH-guests is not necessary and you can continue with step 2.

Please also note that the RWTH-guests network is not available at the Uniklinik RWTH Aachen.

First open the settings and go to the 'WLAN' menu. If you now turn on the WLAN, you will receive a list of the available networks. Now you can connect by clicking on RWTH-guests, activate Access in the browser that opens and then click Done.

Step 2: Download eduroam CAT App


Now you can download and install the eduroam CAT App in the Google Playstore.

Step 3: Accept configuration


Open the eduroam CAT App and search for the configuration for RWTH Aachen University. To start configuring the WLAN, click RWTH Aachen University.

To configure the WLAN, you may need to grant the app permission to access photos, media and files.

Afterwards, click on "Install" and confirm the question with "Yes".

Step 4: Enter login credentials


Now enter your generated login credentials and click 'Done'. (Create login data):

You will then be automatically connected to the eduroam WLAN.

 Step 5: Remove RWTH-guest


To prevent automatic connection to the RWTH-guests WLAN, you must delete it from the stored networks.

Open the WLAN settings and click on RWTH-guest. Now select the option "Remove network".

 

 

 Setup using EAP-MSCHAP-V2

 

 

Icon

Please use eduroam Devicemanager to generate eduroam credentials for every device in use. You will find a tutorial here: https://doc.itc.rwth-aachen.de/x/RQTuAQ. You'll need them to authenticate in step 3.

Please note that login names generated with the help of eduroam Devicemanager will end with @rwth.edufi.de for members of the RWTH Aachen University and with @fzj.edufi.de for the members of the FZ Jülich.

You can still access the institute WLAN using a login name that ends with @rwth-aachen.de.

Step 1: Installing the certificate


Make sure that the T-TeleSec GlobalRoot Class 2 certificate has been installed on your phone. You can check it by trying to choose the certificate for eduroam in the wifi-settings. 

If this is not the case, please connect to the RWTH-guests-network, start the browser and download this certificate (https://doc.itc.rwth-aachen.de/x/WAo1).

Icon

Please make sure that the certificates are downloaded only with the native or the Google Chrome browser. For all other browsers (Firefox, Opera, Dolphin, etc.) proper installation of the certificates is not guaranteed.

In addition, the purpose of the wireless network must be specified explicitly in some Android versions, otherwise the certificate at the eduroam device can not be selected. The certificate name can be chosen freely (in this example ‘T-TeleSec GlobalRoot’).

 

Step 2: Choose WLAN


Select Settings and choose Wi-Fi in the wireless and networks section.

Select the network eduroam to make the required configuration.

Step 3: eduroam configuration


You must make the following configuration:

  • EAP-Method: PEAP
  • Phase2-Authentication: MSCHAPv2
  • CA-Certificate: Deutsche Telekom Root CA 2
Icon

A connection without certificate is possible but not recommended, since your are giving up on the added security from the certification process.

Icon

Sometimes a space will be added to your input if you are using the AutoFill feature, depending on your android keyboard.

  • Anonyme Identität: anonymous-g2@rwth.edufi.de
Icon

Be sure to enter the anonymous identity as described above. Otherwise you will not be able to connect to the eduroam WLAN after 09.07.2019.

You should now be able to connect to eduroam.

 

  • No labels