Apple compatibility issue with campus Wi-Fi
Apple's Private Wi-Fi Address feature, introduced in macOS Sequoia and updated for iOS 18 and iPadOS 18, can cause connectivity issues when using campus Wi-Fi networks. The same is true if you update your iWatch or VisionPro.
OIT strongly recommends that you set Private Wi-Fi Address to "off" on your Apple devices for the UCB Wireless, UCB Guest and eduroam networks.
Learn more about the impacts of Apple's Private Wi-Fi Address feature.
About eduroam
What is eduroam?
eduroam is an international secure federated access service, allowing for members of participating institutions to access a secure wireless network when on the CU Boulder campus or one of the hundreds of other institutions in both the United States and worldwide.
What do I need to install on my computer and what is it used for?
eduroam secure wireless has a couple software components that are used for onboarding:
SecureW2 onboarding agent
- Configures devices' network settings to easily join the encrypted wireless network.
- Installs a secure certificate for eduroam's wireless authentication controller to prevent person-in-the-middle attacks if someone presents a fake "eduroam" wireless network.
SafeConnect Policy Key
- Posture assessment tool for verifying the health of a device before it connects to eduroam. This is used to ensure devices comply with CU Boulder's minimum security requirements. This includes:
- Authentication against the campus Active Directory
- Verifying antivirus is installed, running and has latest definitions
- Verifying Windows/Macintosh firewall is running
- Verifying Windows/Macintosh operating system updates are enabled, running and up-to-date
- Additional posture checking
- Checking if user is behind a NAT device
- Detection of peer-to-peer (P2P) software
- Detection of outdated or vulnerable software
- Detection of outdated or expired operating systems
- Detection of specific malware
Why am I downloading software from a non-colorado.edu address?
Due to the dynamic nature of the onboarding process, the eduroam configuration software must be downloaded from the SecureW2 onboarding webpage. This is necessary and can be trusted.
Should I use eduroam or Cisco VPN for my secured connection?
In general, it is best practice to use eduroam for most secured on-campus connections, while Cisco VPN should be used for secured off-campus connections. Refer to the chart below for specific usage scenarios:
| Service | Connection Location | Purpose |
|---|---|---|
| eduroam | On campus | Create on-campus secure connections that allow users to access file servers and other secured systems, as well as securely browse the internet. |
| Cisco VPN | Off campus | Gain access to campus resources (e.g., library resources, file servers) from off campus. |
| Custom VPN | On campus and off campus | To access department specific resources, custom VPN connections should be used both on and off campus. |
Connecting to the network
How do I connect to eduroam?
Prior to first connecting to eduroam, you must download and install the eduroam configuration software on your device. After you've installed the certificate, select eduroam from your available Wi-Fi networks to connect.
For detailed instructions on setting up your device to connect to eduroam, please refer to the following:
I'm a visitor from another eduroam institution. How do I connect to eduroam from CU Boulder?
If you're a campus visitor from an institution that also participates in eduroam, you can simply select eduroam from your device's available Wi-Fi networks and log in using your institution's credentials.
If you experience any issues with eduroam while visiting CU Boulder, please contact your home institution's service desk or use CU Boulder's guest Wi-Fi network instead.
Can university guests/visitors use eduroam?
If you're a campus visitor from an institution that also participates in eduroam, please refer to the FAQ above.
If you're not from an eduroam institution, or if you're from an eduroam institution but are having trouble connecting, please use CU Boulder's guest Wi-Fi network instead.
Can my smartphone connect to eduroam?
Yes. Refer to the following tutorials to learn how to set up your device:
Can my printer connect to eduroam?
No, printers can't connect to eduroam because they lack encryption mechanisms.
In general, faculty or staff should not use wireless printers because data is passed unencrypted and may violate FERPA, HIPAA or other data sensitivity policies. However, if you need to set up wireless printing, the printer should remain on UCB Wireless.
Troubleshooting
I changed my IdentiKey password and now I can't connect to eduroam. How do I correct this?
Due to the nature of your eduroam credentials being stored locally on your device, changing your IdentiKey password will cause an eduroam authentication failure.
Depending on your operating system, you may be prompted to re-enter your credentials. If not prompted, the most reliable method for correcting the authentication issue is to repeat the onboarding process using the following tutorials: