Configuring Linux

This document assumes the Gnome desktop shipped with many common Linux distributions.  To join eduroam with the Gnome windowing system you must configure the NetworkManager with an eduroam profile.  When asked for your credentials provide credentials based on the following.  If you are from example.edu (your "realm") and your username (sometimes called NetID) is traveler then your login name is traveler [at] example.edu.  Your password is your normal password at your home institution.

Creating an eduroam Profile

Open the NetworkManager as seen below, select the Wireless tab and click "Add".

New Network Connection

In the dialog that appears change the "Connection Name" to eduroam.  You may opt to check the "Connect automatically" check box.  Then fill the Wireless configuration tab as seen in the image below.  The SSID should be "eduroam" (without quotes) and the Mode should be set to "Infrastructure".  Next select the "Wireless Security" tab.

Generic SSID Configuration

In the Wireless Security tab there are many settings to configure.  In the "Security" drop-down box select "WPA & WPA2 Enterprise".  In the Authentication drop-down menu select the PEAP or TTLS authentication method, whichever is used by your home institution.  In the "Anonymous identity" box enter anonymous@<your realm> (i.e. anonymous [at] example.edu in the case described at the top of this document).  Unless your home institution provides a CA certificate leave that drop-down empty.  If they do provide a certificate select it by clicking the file icon on the right side of the widget.  If you are using PEAP leave the "PEAP version" drop-down set to "Automatic".  TTLS users have no analogous setting.  In the "Inner authentication" drop-down select the appropriate option for your home institution (often MSCHAPv2).  Finally provide your username and password from your home institution.  See below for completed forms.  Once the forms look correct (something like those below) press "Apply".

PEAP Configuration TTLS Configuration

Finally, if you have not selected a CA Certificate in the previous step you will be warned (as seen below). Simply select "Don't warn me again" and press "Ignore" unless you have a certificate, at which point please select it.

no CA Cert warning

After these settings are configured, you should be able to connect by pressing "Connect" in the following dialog.  In the future you may connect via the NetworkManager icon in the task-bar.