Skip to main content
Technology at SCU

Using eduroam

SCU uses eduroam as the primary campus wireless network serving our students, faculty and staff. eduroam requires Aruba ClearPass OnGuard on computers (Windows, macOS, Linux) to gain full network access. OnGuard checks to make sure you have anti-virus software installed like SentinelOne, your computer's firewall is turned on, and check that system updates are enabled.

eduroam is also available for people visiting SCU from institutions that participate in eduroam. eduroam visitors do not need OnGuard for eduroam guest network access.

eduroam is a secure wireless network, available at educational and research institutions worldwide. eduroam is only for computers and devices that need to connect via WiFi. Desktop computers using a wired connection do not need to set up eduroam.

Need to register a gaming console, streaming device, or other "Internet of Things" (IoT) type devices? Start here to find out how to use BroncoFi for IoT devices.

To learn more about how eduroam works: https://www.eduroam.org.
To view the list of participating institutions: https://incommon.org/community-organizations/.

General instructions for connecting to eduroam

These are the general steps that will work for most platforms. Detailed instructions for specific platforms are provided below.

Before you begin

  • You must be on the SCU campus to install eduroam. Once eduroam is installed, you can use it at SCU or any other participating institution.
  • If you haven’t set a passcode on your mobile device, this process may require you to do so.
  • If you are on the SCU network, you can safely trust certificates that are downloaded and installed through this process.

Step 1:  Connect to eduroam

  1. Select the eduroam Wi-Fi network.
  2. When prompted, enter your SCU email address (as in bbronco@scu.edu) and password.
  3. If prompted, accept or trust for the certificate for clearpass.scu.edu.
  4. Install OnGuard (Windows, macOS, and Linux computers)

Step 2:  Confirm your eduroam + OnGuard network access
Confirm your eduroam installation by browsing to an SCU site (https://login.scu.edu) and to a site outside of SCU (https://www.mlb.com/giants).

Step 3:  Remove old networks
Once you’ve confirmed your installation, remove any legacy SCU wireless networks that may still be listed (such as SCU-Student, SCU-Employee, or SCU-Guest).

Before you begin

  • You must be on the SCU campus to install eduroam. Once eduroam is installed, you can use it at SCU or any other participating institution.
  • If you are on the SCU network, you can safely trust certificates that are downloaded and installed through this process.
  • There are many different versions of Android in use. These instructions provide a general guide for how to install eduroam for Android, but your own device's exact steps and prompts may vary.
  • If you haven’t set a passcode on your mobile device, this process may require you to do so.
  • If you need to change any settings or are having issues connecting, please forget the eduroam network, reboot your phone, and try connecting again - making sure that the "Anonymous Identity" field is blank.

 

Step 1:  Connect to eduroam

Go to Settings, then tap Wireless & networks, then Wi-Fi settings. Tap eduroam.

When prompted, enter your SCU email address (as in bbronco@scu.edu) and password.

Other options you might see, depending on your version of Android:

  • Security: WPA2 Enterprise / 802.1xEAP
  • EAP method: PEAP
  • Phase 2 authentication: MSCHAPV2
  • CA certificate: Use system certificates
  • Minimum TLS version: TLS v1.0
  • Online certificate status: Do not verify
  • Domain: clearpass.scu.edu
  • Identity: SCU Email address (as in bbronco@scu.edu)
  • Anonymous identity: leave blank
  • Password: enter the password associated with your SCU Username.
  • Advanced options > Privacy: Use device MAC

Tap Connect.

If prompted, tap on “Trust” or “Accept” for the certificate for clearpass.scu.edu.

Android devices do not require OnGuard for network access at this time.

 

Step 2:  Confirm your eduroam installation

Confirm your eduroam installation by browsing to an SCU site (https://login.scu.edu) and to a site outside of SCU (https://www.mlb.com/giants).

 

Step 3:  Remove old networks

Once you’ve confirmed your installation, remove any legacy SCU wireless networks that may still be listed:

  • Open Settings, then tap on Wi-Fi to see the list of available wireless networks.
  • If you see SCU-Employee listed, tap and hold SCU-Employee and then tap Forget.
  • If you see SCU-Student listed, tap and hold SCU-Student and then tap Forget.
  • If you see SCU-Guest listed, tap and hold SCU-Guest and then tap Forget.

Before you begin

  • You must be on the SCU campus to install eduroam. Once eduroam is installed, you can use it at SCU or any other participating institution.
  • If you are on the SCU network, you can safely trust certificates that are downloaded and installed through this process.
  • There are many different versions of Chrome OS in use. These instructions provide a general guide for how to install eduroam for Chrome OS, but your own device's exact steps and prompts may vary.
  • If you haven’t set a passcode on your mobile device, this process may require you to do so.

 

Step 1:  Connect to eduroam

Click the WiFi icon in the bottom-right of your screen and select eduroam from the list of wireless networks.

Enter the following parameters for the options displayed when connecting. These may vary depending on the version of Chrome OS you are using:

  • For the EAP method, specify PEAP.
  • For Phase 2 authentication, specify MSCHAPV2.
  • For Server CA Certificate, select Default.
  • For User Certificate, select None Installed.
  • Leave Subject Alternative Name Match blank.
  • For Domain Suffix Match, enter scu.edu
  • For Identity, enter your SCU email address (as in bbronco@scu.edu).
  • For Password, enter the password associated with your SCU Username.
  • Leave Anonymous Identity blank.

Click Connect.

If prompted, tap on “Trust” or “Accept” for the certificate for clearpass.scu.edu.

Chrome OS devices do not require OnGuard for network access at this time.

 

Step 2:  Confirm your eduroam installation

Confirm your eduroam installation by browsing to an SCU site (https://login.scu.edu) and to a site outside of SCU (https://www.mlb.com/giants).

 

Step 3:  Remove old networks

Once you’ve confirmed your installation, remove any legacy SCU wireless networks that may still be listed:

  • At the bottom right of your screen, select the time. Click through Settings > Network > WiFi > Known networks.
  • If you see SCU-Employee, SCU-Student, or SCU-Guest listed, select that network, select More and then Forget.

Before you begin

  • You must be on the SCU campus to install eduroam. Once eduroam is installed, you can use it at SCU or any other participating institution.
  • If you are on the SCU network, you can safely trust certificates that are downloaded and installed through this process.
  • If you haven’t set a passcode on your mobile device, this process may require you to do so.
    Documentation from Apple: Use a passcode with your iPad or iPhone

 

Step 1:  Connect to eduroam

Open the Settings app, tap Wi-Fi, then select eduroam.

When prompted, enter your SCU email address (as in bbronco@scu.edu) and password.

Tap Join.

If prompted, tap “Accept” for the certificate for clearpass.scu.edu.

iPads and iPhones do not require OnGuard for network access at this time.

 

Step 2:  Confirm your eduroam installation

Confirm your eduroam installation by browsing to an SCU site (https://ecampus.scu.edu) and to a site outside of SCU (https://www.mlb.com/giants).

 

Step 3:  Remove old networks

Once you’ve confirmed your installation, remove any legacy SCU wireless networks that may still be listed:

  • Open the Settings app, then tap Wi-Fi to see the list of available wireless networks.
  • If you see SCU-Employee listed, tap it, then tap on “Forget this network.”
  • If you see SCU-Student listed, tap it, then tap on “Forget this network.”
  • If you see SCU-Guest listed, tap it, then tap on “Forget this network.”

Before you begin

  • You must be on the SCU campus to install eduroam. Once eduroam is installed, you can use it at SCU or any other participating institution.
  • If you are on the SCU network, you can safely trust certificates that are downloaded and installed through this process.
  • You will need Administrator privileges on your computer to complete this process.
  • There are many different distros and versions of Linux available. These instructions provide a general guide for how to install eduroam for a Linux system, but your own device's exact steps and prompts may vary.

 

Step 1:  Connect to eduroam

Click the Network-Manager utility on your toolbar select eduroam from the list of available wireless networks.

Change the Authentication field to Protected EAP (PEAP) and leave Anonymous Identity empty.

Enter clearpass.scu.edu for the Domain field and leave the CA certificate field empty. Also check the box "no CA certificate is required.”

The PEAP version should be set to Automatic, and the Inner authentication should be MSCHAPv2.

Enter your SCU email address (as in bbronco@scu.edu) and password, then click OK. 

At the Continue Connecting prompt, click the Connect button to complete setup.

Proceed to install OnGuard if you are using Ubuntu, RedHat, CentOS, or SLES distributions.


Step 2:  Confirm your eduroam + OnGuard installation

Follow these steps to confirm your eduroam installation:

 

Step 3:  Remove old networks

Once you’ve confirmed your installation, remove any legacy SCU wireless networks that may still be listed:

  • Click the network/WiFi icon in the lower right corner of your screen.
  • Click Network & Internet settings, then click WiFi, then click Manage Known Networks.
  • Select the network you want to delete (SCU-Employee, SCU-Student, SCU-Guest) then click Forget.

Before you begin

  • You must be on the SCU campus to install eduroam. Once eduroam is installed, you can use it at SCU or any other participating institution.
  • If you are on the SCU network, you can safely trust certificates that are downloaded and installed through this process.
  • You will need Administrator privileges on your computer to complete this process.

 

Step 1:  Connect to eduroam

Select eduroam from your list of available wireless networks. 

When prompted, enter your SCU email address (as in bbronco@scu.edu) and password.

Make sure the box next to “Remember this network” is checked.

Click Join.

When prompted to verify the certificate for clearpass.scu.edu, click Continue. You may be prompted for your Mac’s admin username and password to make this change.

Proceed to install OnGuard on your compter.


 Step 2:  Confirm your eduroam + OnGuard installation

Follow these steps to confirm your eduroam installation:

 

Step 3:  Remove old networks

Once you’ve confirmed your installation, set eduroam as your preferred wireless network:

  • From the Apple menu, click System Preferences > Network.
  • Select Wi-Fi and click the Advanced button.
  • Highlight the network you want to remove, click the remove button (–) beneath the list.
  • Confirm your choice when prompted.

Before you begin

  • You must be on the SCU campus to install eduroam. Once eduroam is installed, you can use it at SCU or any other participating institution.
  • If you are on the SCU network, you can safely trust certificates that are downloaded and installed through this process.
  • You will need Administrator privileges on your computer to complete this process.

 

Step 1:  Connect to eduroam

Select eduroam from your list of available wireless networks. Make sure the box next to “Connect Automatically” is checked, then click Connect.

When prompted, enter your SCU email address (as in bbronco@scu.edu) and password, then click OK. 

At the Continue Connecting prompt, click Connect.

Proceed to install OnGuard on your computer.


Step 2:  Confirm your eduroam installation

Follow these steps to confirm your eduroam installation:

 

Step 3:  Remove old networks

Once you’ve confirmed your installation, remove any legacy SCU wireless networks that may still be listed:

  • Click the network/WiFi icon in the lower right corner of your screen.
  • Click Network & Internet settings, then click WiFi, then click Manage Known Networks.
  • Select the network you want to delete, then click Forget.

Now that your device is connected to eduroam, you should automatically be reconnected when you are on the SCU campus, and when you visit other institutions that participate in eduroam.

If you are unable to connect to eduroam, check out our eduroam troubleshooting tips or contact the Technology Help Desk.


 Verifying the eduroam certificate

When you first connect to eduroam, or when the certificate for eduroam is replaced each year, you may be prompted to verify and accept the new certificate. This is a one-time action for each eduroam-connected device. 

Follow these steps to verify the certificate.


Android Devices:
No action is needed. Your connection to eduroam will continue to work without any disruption.


iOS Devices (iPhone/iPad
): Your device may display the following message: “Certificate: clearpass.scu.edu issued by InCommon ECC Server CA (Not Trusted)” as shown below. Tap “Trust” in the upper right corner to continue connecting to eduroam

MacOS devices: Your computer may prompt you to verify that you trust the new certificate with the following message: “Authenticating to network “eduroam.” Click “Continue” to finish connecting to eduroam.


Windows devices: Your computer may prompt you with the following message: “Continue Connecting? If you expect to find eduroam in this location, go ahead and connect. Otherwise it may be a different network with the same name” as shown below.
Click “Connect” to continue to eduroam.


If you don’t get the above messages, and your device can not connect to eduroam, follow these steps to forget eduroam and reconnect to it.