Registering to use eduroam for Sanger Users

To make use of the eduroam system you must accept the terms of the Acceptable Usage Policy below and register for the service

eduroam Acceptable Usage Policy

All users of the eduroam network available at the Wellcome Genome Campus must obide by the general terms set down in the Janet Acceptable Usage Policy & the eduroam(UK) service policy

Reasonable Usage

The network is a shared resource for use of staff & visitors to the Genome Campus. All users of the network should respect other people's requirements and not make excessive demands on the network without prior authorization.

Failure to comply with any of these policies may result in immediate disconnection & reporting to your home organization.

All connections through this network may be monitored for performance & compliance purposes.

If you already have eduroam configured from another institute please contact helpdesk for advice.

Setting up your client

iOS for iPhones, iPads and iPod touches

*

2) A summary of the profile will be displayed

‹ Back | Next ›

*

3) The profile is unsigned, you will need to accept this and, if set, enter your passcode.

« Start | ‹ Back | Next ›

*

4) Enter your username followed by @sanger.ac.uk

« Start | ‹ Back | Next ›

*

5) Enter your password - this is the password you will have been given at registration

« Start | ‹ Back | Next ›

*

6) Once the profile is loaded press done.

You will now be able to connect to the eduroam SSID without having to enter any further login information.

‹ Back

 

Android

These instructions are generic, the exact steps may vary depending on the version of Android & any operator specific customisations.

Android gingerbread versions 2.3.1 through 2.3.5 have a buggy wireless supplicant that prevents them from connecting to eduroam. Versions prior to 2.3.x have been reported as working and version 2.3.6 has also been confirmed to work. Some versions of Honeycomb (3.x) have also exhibited this problem. Ice Cream Sandwich and Jellybean appear to have no issues.

Import the GRL certificate authority

  1. Ensure that 'Secure credential storage' is enabled

    • Open Settings, then Security
    • Ensure Secure credential storage is enabled (you may have to enter a password or a PIN)
  2. Import the Genome Research Ltd CA Certificate

    • Enter a name for the certificate if prompted (e.g. GRL CA)

Next ›

*

1) Choose WiFi Settings

‹ Back | Next ›

*

2) Select Add WiFi network

« Start | ‹ Back | Next ›

*
  • Enter the Network SSID as eduroam
  • Set Security to WPA2-EAP or 802.1x Enterprise
  • Set EAP Type to PEAP or TTLS

    If one does not work for you please try the other, different protocols work with different versions of android, both are supported

  • Set Phase 2 Authentication to MSCHAPv2
  • Set CA Certificate to GRL CA (or what ever you named the certificate earlier)
  • Set Identity to be <username>@sanger.ac.uk
  • Set Anonymous Identity to be anonymous@sanger.ac.uk
  • Set Wireless Password to be the password you were given at registration
  • Save settings

« Start | ‹ Back

 

Windows XP

*

1) Open the Wireless Network Connection dialogue by selecting View Available Wireless Networks from the tool tray

Select Change advanced settings

Next ›

*

2) On the Association tab

Enter eduroam as the Network Name (SSID)

Select WPA2 as the Network Authentication

Select AES as the Data encryption

‹ Back | Next ›

*

3) On the Authentication tab

Select Protected EAP (PEAP) as the EAP Type

Uncheck Authenticate as computer when computer information is available

Press Properties

« Start | ‹ Back | Next ›

*

4) Check connect to these servers and enter orps.sanger.ac.uk as the server name

Ensure that the Genome Research Ltd certificate authority is selected from the list

Set Secured password (EAP-MSCHAP v2) as the Authentication method and press Configure

« Start | ‹ Back | Next ›

*

5) Uncheck Automatically use my Windwos logon name and password and press OK

Close all dialogues with OK

« Start | ‹ Back | Next ›

*

6) Back on the Wireless Network Connection window select the eduroam network and press Connect

« Start | ‹ Back | Next ›

*

7) Enter the Username & Password that you were allocated at registration and press OK.

You should now connect to the eduroam network.

« Start | ‹ Back

 

Windows 7

*

1) From the Network and Sharing Centre select Manage wireless networks

Next ›

*

2) Select add

‹ Back | Next ›

*

3) Select Manually create a network profile

« Start | ‹ Back | Next ›

*

4) Enter eduroam as the network name, security type WPA2-Enterprise & Encryption type: AES

« Start | ‹ Back | Next ›

*

5) Select Change Connection Settings to enter some further details

« Start | ‹ Back | Next ›

*

6) From the Security tab of the dialogue select Microsoft: Protected EAP (PEAP) as the Authentication Method

« Start | ‹ Back | Next ›

*

Download the Genome Research Ltd CA Certificate (right click -> save as)

Double click the saved file

Select Install Certificate

« Start | ‹ Back | Next ›

*

Step through the wizard by pressing next

« Start | ‹ Back | Next ›

*

Select "automatic" and press next

« Start | ‹ Back | Next ›

*

Finish the wizard

« Start | ‹ Back | Next ›

*

Confirm installation of the GRL certificate authority.

Note: this screen may not be present.

« Start | ‹ Back | Next ›

*

7) Ensure that Validate Server Certificate is checked, check Connect to these servers and enter orps.sanger.ac.uk

Below this ensure that the Genome Research Ltd Certificate Authority is checked in the list of Trusted Root Certificate Authorities. If the GRL certificate does not appear follow the instructions below to install the root certificate.

It is important that these are entered correctly, they ensure that you only ever send authentication credentials to the Sanger Institute's servers. Failing to add these could result in your password being exposed

Ensure that the Authentication Method is set to Secured password (EAP-MSCHAP v2) and press Configure

« Start | ‹ Back | Next › || Install certificate ›

*

8) Uncheck Automatically use my Windows logon name and password and press OK

Press OK to close the Protected EAP Properties dialogue

« Start | ‹ Back | Next ›

*

9) Back on the eduroam Wireless Network Properties select Advanced Settings

« Start | ‹ Back | Next ›

*

10) Check Specify authentication mode and select User Authentication

Press Save credentials and enter your eduroam username & Password that you received from the registration process.

Press OK to return to the eduroam Wireless Properties Dialogue

« Start | ‹ Back

 

Mac OS/X

The instructions for OS X are different for different versions, please choose from the two options below:

Instructions for OS X up to version 10.6 (Snow Leopard)

*

1) Create a new location, in this example we have called the location eduroam.

Select the AirPort Interface and press "Advanced"

Next ›

*

2) Select the 802.1X tab

‹ Back | Next ›

*

3) Select Add User Profile from the the 802.1X tab

« Start | ‹ Back | Next ›

*

4) Enter User credentials as given when registering for the eduroam service.

Select the eduroam network from the Wireless Networks list.

« Start | ‹ Back | Next ›

*

5) Select the AirPort tab and press '+' to add a new network

« Start | ‹ Back | Next ›

*

6) Press "Show Networks"

« Start | ‹ Back | Next ›

*

7) Select the eduroam network from the list

select the 802.1X profile you created previously (steps 3 and 4) and press 'Add'

« Start | ‹ Back | Next ›

*

8) Back at the system preferences screen press "Apply"

You should now be able to connect to the eduroam network.

« Start | ‹ Back | Next ›

*

9) On first connection you may be asked to accept the certificate for "orps.sanger.ac.uk".

Select "Show certificate" and verify that the certificate is signed by the "Genome Research Ltd certificate authority".

Once you have verified this select the "Always Trust" option and press continue. You may be required to enter your key chain password at this point.

« Start | ‹ Back

 

Instructions for OS X from version 10.7 (Lion)

Please note you will need administrative rights for this procedure to work.

*

1) Create a new location and remove all interfaces except Wi-Fi

Download the iOS configuration profile

Next ›

*

2) Double click on the downloaded file

‹ Back | Next ›

*

3) Click Continue to confirm you wish to install the profile

« Start | ‹ Back | Next ›

*

4) Click Continue to confirm that you trust the Genome Research Certificate

Select the eduroam network from the Wireless Networks list.

« Start | ‹ Back | Next ›

*

5) Enter your eduroam username and password

Enter the administrator username and password if prompted

« Start | ‹ Back | Next ›

*

6) Using the wireless menu bar item ensure that eduroam is selected.

« Start | ‹ Back

 

Linux

These instructions are valid for Linux devices using Network Manager

*

1) From the network manager select the eduroam network

Next ›

*

2) Enter the Settings as shown in the Image, the Genome Research Certificate can be obtained here

‹ Back

 

Generic Information

If your device/operating system is not covered by the above. These are the generic settings that are required to connect to the Sanger Institute's eduroam home service

EAP Method
EAP-TTLS
Outer identity
anonymous@sanger.ac.uk
Inner Authentication Protocol
PAP - Password Authentication Protocol
Username
<username>@sanger.ac.uk
Password
Password issued during registration process
Certificate
Download & install the Sanger Root CA Certificate

Cookies policy | Terms & Conditions. This site is hosted by the Wellcome Trust Sanger Institute.