Eduroam at the Chemnitz University of Technology

1. Download the tool for X86 systems.
2. Run the program (as normal Windows user) and, if appropriate, confirm the security warnings.
   (Windows 10 with Windows Defender SmartScreen: More info → Run anyway)
3. In your web browser the password dialog of your user account (IdM-Portal) will be opened.
4. Choose an existing device entry or create a new one.
5. Enter the PIN that is shown to you in the dialog box of the configuration program.
6. If appropriate, confirm the certificate installation (necessary only once).
7. The connection to the eduroam wireless network will be established. You may close your web browser.

You can find illustrated instructions in our blog ^[de].

Requirements:

• Windows service “WLAN AutoConfig” running
• Web browser installed

1. Download the Python script archive.
2. Decompress the archive.
   (In console: tar -xf eduroam_TUC.tar)
3. Run the script/configuration tool “eduroam_TUC.py”.
   (In console: TUC-eduroam-config/eduroam_TUC.py)
4. In your web browser the password dialog of your user account (IdM-Portal) will be opened.
5. Choose an existing device entry or create a new one.
6. Enter the PIN that is shown to you in the dialog box of the configuration tool.
7. The configuration will be written. The connection to the eduroam wireless network may be established now.

You can find illustrated instructions in our blog ^[de].

Requirements to run the tool successfully:

• WLAN controlled by NetworkManager (standard for most of the Linux distributions)
• Python with Module python-dbus installed
• Web browser installed

Alternative: Usage of a generated wpa_supplicant.conf

1. Open https://idm.hrz.tu-chemnitz.de/ in a web browser and go to the management of app and device passwords page.
2. Choose an existing device entry or create a new one.
3. The WPA supplicant configuration will be available as download option (Download configuration file for Linux (advanced)).

For Android devices the app “TUC-WLAN” cares for a correct and secure configuration of the access:

1. Download the app from Play Store (use QR code), from F-Droid (search for “TUC-WLAN”) or directly from our website.
2. Run the app.
3. As long as the app recognizes errors within your device configuration, solve them please. You will get support for a lot of common errors.
4. When all recognized errors are solved, you can start the configuration.
5. Choose a name for your device. This name will be allocated for the device specific password which gets created by the app within the IdM Portal.
6. Log in to the Web Trust Center with your user name and password. Subsequently, eduroam is configured automatically.
7. The configuration details are shown on the status display.

You can find illustrated instructions in our blog ^[de].

Google Play Store Link

https://mytuc.org/tucwlan

for iOS from version 7 and OS X from version 10.10

1. Please, open https://mytuc.org/wlan in web browser Safari on your device.
2. Choose or create an app and device password of the type “WLAN” in the IdM Portal. Please note, in this step a configuration file is created, which has to be downloaded onto your device.
   • Create password and configuration file or renew existing password and download configuration
   • or open https://idm.hrz.tu-chemnitz.de/ and…
     • Click User menu
     • Click Change password
     • Click Manage app and device passwords
     • Add App and device password or (Generate new Password)
     • The wifi configuration file is offered for download:
3. Download this configuration profile from the IdM-Portal to your device.
4. Install the profile.
5. Eduroam ist configured now.

You can find illustrated instructions in our blog: for iOS ^[de] and for MacOS (OS X) ^[de].

1. Please, open https://mytuc.org/wlan on your device.
2. Choose or create an app and device password of the type “WLAN” in the IdM Portal. Please note, in this step a configuration file is created, which has to be downloaded onto your device.
   • Create password and configuration file or renew existing password and download configuration
   • or open https://idm.hrz.tu-chemnitz.de/ and…
     • Click User menu
     • Click Change password
     • Click Manage app and device passwords
     • Add App and device password or (Generate new Password)
     • The wifi configuration file is offered for download:
3. Download this configuration profile (ONC file) from the IdM-Portal to your device.
4. Open the network settings on your device at chrome://network/#general.
5. Install the downloaded ONC file into the device.
6. Eduroam ist configured now.

Like the TU Chemnitz institutions worldwide participate in eduroam. This means: If you visit another university that also supports eduroam, you can use the wireless network access there with your TU Chemnitz configuration. And likewise, guests of the TU Chemnitz can connect to our wireless network with their “home institution configuration”. Depending on the institution-specific policies extended or reduced ressources may be provided to the users.

Eduroam is an international RADIUS-based infrastructure that uses 802.1X security technology to roam users between all participating institutions.

The TU Chemnitz configuration uses app and device passwords ^[de] and a specific certificate chain ^[de] for the RADIUS server exclusively from October 2018 on. For security reasons a connection using your user acount and your URZ password is not possible. The manual configuration of a secure eduroam access is complex or even not fully possible on some devices. Therefore we provide tool support. The configuration made with our tools ensures that the initial connection will be with our RADIUS server, and only to our RADIUS server your credentials will be sent.

I own a device that is not supported by the tools provided. How can I configure eduroam access?

• eduroam is for personal devices. On IoT devices (Internet of things) use the lab network.
• In other cases appeal to our user support ^[de].

Why do I have to enable a lock screen on Android?

For secure operation of eduroam a certificate has to be installed on the device. Installing a certificate is impossible on Android without a lock screen. If your device has a fingerprint sensor, you use the fingerprint sensor to unlock the screen comfortably.

Should I use my URZ password for the lock screen on Android?

You should use a different password or PIN on your mobile device. Using the same password for different purposes is generally a bad idea.

The app cannot load https://idm.hrz.tu-chemnitz.de/…

To configure your device the app has to access the IdM portal which is password protected for security reasons. You have to enter your URZ password into a web frame which is provided by Android. If the Android browser on your device is outdated, this might not work.

To fix this, please update the app “Android System WebView” and Google Chrome. Open the Play Store, search for “Android System WebView”. This app is provided by Google LLC. Install the provided updates. After that, install updates for Google Chrome.

I cannot modify or delete the existing eduroam configuration in Windows 7…

If the GUI does not allow deleting or overwriting of the WLAN configuration, the command line (cmd.exe) helps:

netsh wlan delete profile name="eduroam"

Afterwards run the eduroam configuration program.

After a fresh Windows 11 installation the eduroam configuration aborts with the error “HTTP POST to TU Chemnitz IdM server failed”…

According to our experieces, fresh Windows installations do not yet include all current root certificates. (These are used to check https connections.) To post-install the relevant certificate, you may run iexplore.exe and open the TUC IdM portal.