How to Connect to Eduroam: A Complete Setup Guide
Eduroam (education roaming) is a secure, worldwide Wi-Fi network used by universities, colleges, research institutions, and some schools. If your institution participates, you can connect to Wi-Fi on any participating campus worldwide using your home institution's login credentials — no guest passwords, no new accounts. Here's how it works and how to get connected across different devices.
What Is Eduroam and How Does It Work?
Eduroam uses a federated authentication system built on WPA2-Enterprise (and increasingly WPA3-Enterprise) security protocols. When you sign in at a foreign institution, your login request is routed back to your home institution's authentication server via a chain of RADIUS (Remote Authentication Dial-In User Service) servers. Your home university verifies who you are, and access is granted — all without the visited network ever seeing your credentials.
This is meaningfully different from a standard Wi-Fi connection. There's no shared password. Each user authenticates individually, which makes eduroam more secure than typical public or campus guest networks.
What You Need Before You Connect
Before attempting to connect, confirm a few things:
- Your institution participates in eduroam. Most universities in Europe, North America, Australia, and many other regions do. Check eduroam.org for a global map.
- You have active credentials. This is usually your institutional email address and a password — sometimes a separate eduroam-specific password set through your IT portal.
- Your device supports WPA2-Enterprise. Most modern laptops, smartphones, and tablets do. Older or budget devices occasionally lack this support.
Some institutions also require you to install a configuration profile or certificate before connecting. This step varies widely — more on that below.
How to Connect on Windows
- Open Settings → Network & Internet → Wi-Fi
- Select eduroam from the available networks
- When prompted, enter your institutional username (usually your full email address, e.g.,
[email protected]) and password - Accept the certificate when prompted — confirm it matches your institution's expected server name if you've been given one
Some Windows setups, particularly on managed or domain-joined machines, may require you to first download a CAT (Configuration Assistant Tool) installer from your IT department. This automates certificate installation and removes manual configuration steps.
How to Connect on macOS
- Click the Wi-Fi menu and select eduroam
- Enter your institutional username and password
- A certificate verification prompt will appear — click Continue or Trust after confirming the certificate details
If your Mac repeatedly fails to connect or drops the eduroam network, downloading your institution's CAT profile is usually the fix. This installs the correct certificate and connection settings automatically.
How to Connect on iPhone or iPad (iOS/iPadOS)
- Go to Settings → Wi-Fi
- Tap eduroam
- Enter your username and password
- Tap Trust when the certificate prompt appears
iOS handles eduroam reasonably well natively, but if your institution requires a specific authentication method (like TTLS/PAP instead of PEAP), the CAT app or a downloaded .mobileconfig profile from your IT portal may be necessary.
How to Connect on Android 📱
Android is where setup varies the most, because different manufacturers and Android versions handle enterprise Wi-Fi differently.
- Go to Settings → Wi-Fi and select eduroam
- You'll see fields for:
- EAP method — usually PEAP
- Phase 2 authentication — usually MSCHAPV2
- CA certificate — set to your institution's certificate, or select Use system certificates / Trust on first use if unsure
- Domain — enter your institution's domain (e.g.,
university.edu) - Identity — your full institutional email
- Password — your eduroam or institutional password
Android 11 and later removed the "Don't validate" certificate option, which means you must either install a CA certificate or correctly set the domain field. Skipping this step will cause connection failures on modern Android devices.
The CAT Tool: When Manual Setup Isn't Enough
The eduroam CAT (Configuration Assistant Tool) at cat.eduroam.org is the most reliable way to configure any device. It detects your operating system and delivers a custom installer or profile pre-configured with the right certificates, EAP settings, and server details for your specific institution.
If you're having trouble connecting manually, the CAT tool should be your first troubleshooting stop — not your last resort.
Common Connection Problems
| Problem | Likely Cause | What to Check |
|---|---|---|
| Wrong password error | Incorrect credentials or expired password | Reset via IT portal |
| Certificate error | Missing or untrusted CA certificate | Install via CAT tool |
| Network not appearing | Device not in range or institution not broadcasting | Confirm location and coverage |
| Connects but no internet | Authentication succeeded, routing issue | Contact local IT support |
| Android repeatedly disconnects | Missing domain/CA certificate field | Re-enter with correct domain |
Roaming to Another Institution
One of eduroam's biggest advantages is automatic roaming. At a participating institution you're visiting, simply select the eduroam network and use your home credentials — the same username and password you use at your own campus. No registration with the visited site is needed. 🌍
The authentication chain handles the rest transparently.
What Affects Your Experience
Eduroam connection quality isn't uniform. Several factors shape how smoothly setup goes and how reliably it performs:
- Your institution's IT configuration — some schools provide excellent documentation and CAT profiles; others leave more to manual setup
- Your device's OS version — newer Android and Windows versions enforce stricter certificate validation
- The visited institution's network infrastructure — signal strength and bandwidth vary between sites
- Whether your password has expired — eduroam credentials often tie to institutional passwords with expiry policies
Someone connecting a university-managed Windows laptop with a pre-loaded certificate profile has a very different experience from someone manually configuring eduroam on a personal Android phone for the first time. The underlying protocol is the same — but the practical path to a working connection depends heavily on your specific device, OS version, and what your institution has set up on their end.