Configuring eduroam on a Windows 7 PC

Automatic setup

The preferred method for configuring your device is to use the eduroam CAT (Configuration Assistant Tool) - this tool will automatically set your device up to use the eduroam network. To do this, go to the eduroam CAT page (http://eduroam.nerc.ac.uk/cat.asp) and follow the instructions appropriate to your device, rather than using the guidance below.

Manual setup

Only perform a manual setup if you experience problems with the automatic setup!

Certificate installation

  1. If your laptop is a member of the NERC Domain you can proceed to step 1 below. If not, then you will need to download and install the NERC root CA certificate into the Trusted Root Certificates machine store. You can do this by clicking the following link and saving the file to a known location: NERC root CA certificate - external link (https://pki.nerc.ac.uk/NERC-2015-ROOT-CA.crt)

  2. Locate the certificate, then right click on it and select Install Certificate.

  3. Click Next at the first screen.

  4. Select the Place all certificates in the following store radio button and select Browse.

  5. Tick the box next to Show physical stores.

  6. Expand Trusted Root Certification Authorities, select Local computer and click OK.

  7. Click Next then Finish.

Connecting to the eduroam wireless network

  1. First open up Control Panel. This can be achieved by clicking the "Start Orb" then selecting Control Panel.

  2. If your Control Panel is in "Category View" select Network and Internet, else select Network and Sharing Center and skip to step 4.

    screenshot 1

  3. Select Network and Sharing Center.

    screenshot 2

  4. Select the link for Set up a new connection or network.

    screenshot 3

  5. Select Manually connect to a wireless network.

    screenshot 4

  6. Ensure Start this connection automatically is ticked and enter the details below into the correct fields:
    (ensure that "eduroam" is entered all in lower case!).

    Network name: eduroam
    Security type: WPA2-Enterprise
    Encryption type: AES

    Click Next once complete.

    screenshot 5

  7. Click the button labelled Change connection settings.

    screenshot 6

  8. Select the Security tab.

    screenshot 7

  9. Click the button labelled Settings.

    screenshot 8

  10. Ensure that the following tick boxes are checked: Validate server certificate and Connect to these servers.

    In the text box below Connect to these servers enter "NERCKWORPSA.ad.nerc.ac.uk;NERCKWORPSB.ad.nerc.ac.uk" (without the speech marks and ensuring there is a semi colon and no spaces).

    Under the heading Trusted Root Certificate Authorities scroll down and ensure NERC-2015-ROOT-CA is ticked and that all others are unticked.

    Tick the box Do not prompt user to authorize new servers or trusted certification authorities.

    Under the heading Select Authentication Method click Configure....

    screenshot 9

  11. Remove the tick for Automatically use my Windows logon name and password.

    Select OK and then OK again.

    screenshot 10

  12. Click the button labelled Advanced settings.

    screenshot 11

  13. Ensure the tick box for Specify authentication mode is ticked then select User authentication from the drop down below it.

    Click the Save credentials button to the right.

    screenshot 12

  14. Enter your NERC Office 365 logon username and password. For example:

    • My.Name@nerc.ukri.org
    • fhdg@bas.ac.uk
    • cjie@bgs.ac.uk
    • abde@nerc.ac.uk

    Note: For most people, this is your email address. Please contact your local IT team if you have any questions.

    Click OK then OK again and finally Close to finish.

    screenshot 13

  15. Your Windows 7 laptop should now automatically connect to the eduroam network.