Eduroam unter MacOS/en: Unterschied zwischen den Versionen

Aktuelle Version vom 12. Dezember 2025, 09:54 Uhr

Die deutsche Version finden Sie auf der Seite Eduroam unter macOS

The RADIUS server certificate will be replaced on 17 December 2025 at 8:00 a.m. After that, your device may prompt you to verify the certificate before trusting it. You can find the current fingerprint for the certificate here:

https://static.netsec.uni-paderborn.de/radius/

You do not need to replace any network certificates on your device. Most devices should still be able to connect to eduroam without any problems. More details on how individual devices will behave can be found here:

For details click here

Depending on the device, you may have to reconnect to eduroam, select the certificate again or trust the certificate.

macOS

Zertifikat einblenden to check certificate
Continue to trust the certificate

You may need to select your certificate again afterwards.
Do not enter a username to log in to eduroam!

iPhone und iPad

Display certificate to check the certificate
Accept certificate to trust the certificate

Windows

Show certificate details to check the certificate
Connect to trust the certificate

This tutorial describes how to set up the Wi-Fi Eduroam on macOS.

Video tutorial[Bearbeiten | Quelltext bearbeiten]

Step-by-step description[Bearbeiten | Quelltext bearbeiten]

What needs to be done?[Bearbeiten | Quelltext bearbeiten]

Create a new network certificate in the service portal.
Set up Eduroam with the new network certificate.
If necessary, remove the Webauth network from the preferred networks of your device.

Step-by-step instructions[Bearbeiten | Quelltext bearbeiten]

Create network certificate[Bearbeiten | Quelltext bearbeiten]

To use Eduroam you need a network certificate at the University of Paderborn. In the first step we have to create and download this.

The "Webauth" network can be used for this process. “Webauth” is only intended for this setup process and will log you out again after a short time.

Go to the service portal and log in with your university account.

Open the "Netzwerkeinstellungen" under "Benutzerverwaltung".

Click "Neues Zertifikat erstellen".

Give the certificate a unique name (Ex: MacBook)
Select "Version 1" as the file format.
Then click on "Neues Zertifikat zusenden".

Version 1 or 2 - What's the difference?

The certificates are available for download in different container formats. The selected version is a recommendation that, in our experience, works well for this operating system.

Version 1 is a TripleDES-SHA1 container
Version 2 is an AES-256 container

AES-256 encryption is preferred for security reasons. Unfortunately, it is not yet supported by all operating systems.

A new network certificate has been created for you.
First copy the Importpasswort to the clipboard.
Now click on "Netzwerkzerifkat herunterladen".

Install network certificate[Bearbeiten | Quelltext bearbeiten]

Open the certificate.

Enter the import password for the certificate.
We just copied it to the clipboard.
Alternatively, we can type it from the service portal.
We continue with "OK".

Set up Eduroam[Bearbeiten | Quelltext bearbeiten]

The certificate is imported, now we can set up Eduroam.
To do this, click on the WLAN symbol in the bar at the top and then continue by clicking on Eduroam.

Use the first button to select your certificate - It is <username>@uni-paderborn.de.
Be sure to leave the field for user name and password blank!
Then click "OK".

Click on "Fortfahren".

MacOS now informs us that a change has been made to our computer.
To confirm, enter the password for your Mac and then click Allow.
This query can appear up to three times. Enter the password for your Mac every time.

Remove Wi-Fi Network Webauth[Bearbeiten | Quelltext bearbeiten]

Now we're basically done - Eduroam is set up and ready to use.
However, if you were using the Wi-Fi network Webauth on your Mac, you should definitely remove it, as otherwise problems may occur.
To do this, click the Wi-Fi icon again at the top.
Click on "System Preferences" > "Wi-Fi Settings..." to access the settings.

Here, we select Webauth from the list, click on the three dots next to it, and then click "Ignore this network...".

Finally, we confirm once again that we want to ignore the Webauth network. This will prevent our device from connecting to Webauth instead of Eduroam.

Troubleshooting[Bearbeiten | Quelltext bearbeiten]

If you are unable to connect to Eduroam as described above, follow these steps.
Remove the WLAN profiles for Eduroam and Webauth as described above.

Click on the WiFi icon in the bar at the top.
Select "Connect to another network...".

From macOS 12 - Monterey this may look different.
Click on the WiFi icon.
Click "Other Networks".
Click "Other...".

Set up the network with the following settings:

Network name: eduroam
Security: Company-wide WPA2
Mode: EAP-TLS
Identity: Select your installed network certificate. The name ends with “@uni-paderborn.de”.
Username: Be sure to leave this field blank.

Now click on Verbinden.

Bei Fragen oder Problemen können Sie uns zu unseren Servicezeiten telefonisch oder per E-Mail erreichen:

☎ Helpdesk: +49 (5251) 60-5544 • ☎ Medien: +49 (5251) 60-2821 • E-Mail: zim@uni-paderborn.de

Oder Sie besuchen uns vor Ort: Sie finden das Notebook-Café gemeinsam mit dem Servicecenter Medien in H1.201.

Servicezeiten

	Mo - Do	Fr
Vor-Ort-Support	08:30 - 16:00	08:30 - 14:00
Telefonsupport	08:30 - 16:00	08:30 - 14:00
Servicecenter Medien	08:30 - 16:00	08:30 - 14:00

@@ Zeile 2: / Zeile 2: @@
 |origin=Eduroam unter MacOS
 |lang=en
-|translated title=eduroam on macOS
+|translated title=Setup eduroam on macOS
 }}
-This tutorial describes how to set up the Wi-Fi eduroam on macOS.
+{{Fingerprint_Radiuszertifikat-en}}
+This tutorial describes how to set up the Wi-Fi Eduroam on macOS.
+==Video tutorial==
+{{#ev:upb|070bb8183fa3a4bb236a6c345f396e28}}
 == Step-by-step description==
+== What needs to be done? ==
+* Create a new network certificate in the service portal.
+* Set up Eduroam with the new network certificate.
+* If necessary, remove the Webauth network from the preferred networks of your device.
+== Step-by-step instructions ==
 === Create network certificate ===
-Visit the [http://sp.upb.de ServicePortal] and log in with your university account.
+To use Eduroam you need a network certificate at the University of Paderborn. In the first step we have to create and download this.
+: The '''"Webauth"''' network can be used for this process. “Webauth” is only intended for this setup process and will log you out again after a short time.
+<br>
+Go to the [http://sp.upb.de service portal] and log in with your university account.
 <br clear=all>
-[[Datei:Screenshot SP auswahl.png|links|mini|350px|]]
+[[Datei:Eduroam-unter-android-3.png|links|mini|350px|]]
 <br>
-* Click on '''Benutzerverwaltung''' and '''Netzwerk Einstellungen''' .
+* Open the "Netzwerkeinstellungen" under "Benutzerverwaltung".
 <br clear=all>
-[[Datei:Screenshot SP network.png|links|mini|350px|]]
+<br clear=all>
+[[Datei:Eduroam-unter-android-4.png|links|mini|ohne|350px]]
 <br>
-* Click on '''Neues Netzwerkzertifikat erstellen'''
+* Click '''"Neues Zertifikat erstellen"'''.
 <br clear=all>
-[[Datei:Screenshot SP new-cert.png|links|mini|350px|]]
+[[Datei:Netzwerkzertifikat-container-v1.png|links|mini|ohne|350px]]
 <br>
-* Choose an identifier like '''MacBook'''.
+* Give the certificate a unique name (Ex: MacBook)
-* Click on '''Neues Zertifikat zusenden'''.
+* Select '''"Version 1"''' as the file format.
+* Then click on '''"Neues Zertifikat zusenden"'''.
 <br clear=all>
-[[Datei:Screenshot SP dwonload cert.png|links|mini|350px|]]
+<bootstrap_accordion>
+<bootstrap_panel heading="Version 1 or 2 - What's the difference?" color="info">
+The certificates are available for download in different container formats. The selected version is a recommendation that, in our experience, works well for this operating system.
+* Version 1 is a TripleDES-SHA1 container
+* Version 2 is an AES-256 container
+AES-256 encryption is preferred for security reasons. Unfortunately, it is not yet supported by all operating systems.
+</bootstrap_panel>
+</bootstrap_accordion>
+[[Datei:Netzwerkzertifikat-download.png|links|mini|ohne|350px]]
 <br>
-* Copy the '''"Import Passwort"'''.
+* A new network certificate has been created for you.
-* Download the certificate via '''"Netzwerkzertifikat herunterladen"'''
+* First copy the '''Importpasswort''' to the clipboard.
+* Now click on '''"Netzwerkzerifkat herunterladen"'''.
 <br clear=all>
-=== Install certificate===
+===Install network certificate===
+[[Datei:Eduroam-unter-macos-07.png]] Open the certificate.
 [[Datei:Screenshot macOS cert-imp.png|links|mini|350px|]]
 <br>
-* Open your certificate.
+* Enter the import password for the certificate.
-* Install the certificate by using the '''import password''' - We copied it in the previous step.
+* We just copied it to the clipboard.
-* Click '''"OK"''' to continue.
+* Alternatively, we can type it from the service portal.
+* We continue with '''"OK"'''.
+<br clear=all>
+[[Datei:Screenshot macOS cert-imp-2.png|links|mini|ohne|450px|If this menu appears: select "'''Login"''' and '''"Add"'''.]]
 <br clear=all>
-=== Configurate eduroam ===
+=== Set up Eduroam ===
 [[Datei:Screenshot macOS wifi dropdown.png|links|mini|350px|]]
 <br>
-* Open the Wi-Fi settings.
+* The certificate is imported, now we can set up Eduroam.
-* Choose '''eduroam'''.
+* To do this, click on the WLAN symbol in the bar at the top and then continue by clicking on '''Eduroam'''.
+<br clear=all>
+[[Datei:Eduroam-unter-macos-03.png|links|mini|ohne|350px|macOS 12 Monterey and newer]]
+<br>
+* Use the first button to select your certificate - It is '''<username>@uni-paderborn.de'''.
+* <span style="color:red">Be sure to leave the field for user name and password blank!</span>
+* Then click '''"OK"'''.
 <br clear=all>
-Choose the following options:
+[[Datei:Eduroam-unter-macos-06.png|links|mini|ohne|350px|Zertifikat prüfen]]
-[[Datei:Screenshot macOS wifi new network.png|links|mini|350px|]]
 <br>
-* '''Modus:''' EAP-TLS
+* Click on '''"Fortfahren"'''.
-* '''Identity:''' Choose your user certificate.
-* '''Username:''' Leave this field empty!
-* Click on '''Connect''' to continue.
 <br clear=all>
 [[Datei:Screenshot macOS abfrage sicherheit.png|links|mini|350px|]]
-<br>
+<br clear=all>
-* You need to allow the changes by using your '''Mac Password'''.
+* MacOS now informs us that a change has been made to our computer.
-* This security check may appear three times.
+* To confirm, enter the password for your Mac and then click '''Allow'''.
+* This query can appear up to three times. Enter the password for your Mac every time.
 <br clear=all>
-== Delete webauth ==
+== Remove Wi-Fi Network Webauth ==
 [[Datei:Screenshot macOS wifi dropdown setting.png|links|mini|350px|]]
 <br>
-* If used, you need to delete webauth from your prefered networks.
+* Now we're basically done - Eduroam is set up and ready to use.
-* Open the Wi-Fi Settings.
+* However, if you were using the Wi-Fi network Webauth on your Mac, you should definitely remove it, as otherwise problems may occur.
-* Click on '''"Open network..."'''.
+* To do this, click the Wi-Fi icon again at the top.
+* Click on "System Preferences" > "Wi-Fi Settings..." to access the settings.
 <br clear=all>
 [[Datei:Screenshot macOS setting wifi.png|links|mini|350px|]]
 <br>
-* Click on '''"Additional options..."'''.
+* Here, we select Webauth from the list, click on the three dots next to it, and then click '''"Ignore this network..."'''.
 <br clear=all>
 [[Datei:Screenshot macOS setting wifi networks.png|links|mini|350px|]]
 <br>
-* Select '''"Webauth"'''.
+* Finally, we confirm once again that we want to ignore the Webauth network. This will prevent our device from connecting to Webauth instead of Eduroam.
-* Delete it via the'''Minus-Symbol'''.
-* Continue with '''"OK"'''.
-* Click on '''"Apply"''' to continue.
 <br clear=all>
-== Troubleshooting==
+==Troubleshooting==
-If you can't log into eduroam, try the following steps:
+If you are unable to connect to Eduroam as described above, follow these steps.
 <br>
-Delete '''Eduroam''' and '''Webauth''' explained in the previous step.
+Remove the WLAN profiles for '''Eduroam''' and '''Webauth''' as described above.
 <br clear=all>
 [[Datei:Eduroam-unter-MacOS-01.png|links|mini|ohne|350px]]
 <br>
-* Open the '''Wi-Fi-Settings'''
+* Click on the WiFi icon in the bar at the top.
-* Click on '''"Connect to other network..."'''
+* Select '''"Connect to another network..."'''.
 <br clear=all>
-Use the following options to configure eduroam:
+[[Datei:Eduroam-unter-macos-05.png|links|mini|ohne|350px|macOS Monterey]]
+<br clear=all>
+* From macOS 12 - Monterey this may look different.
+* Click on the WiFi icon.
+* Click '''"Other Networks"'''.
+* Click '''"Other..."'''.
+<br clear=all>
+Set up the network with the following settings:
+<br>
 [[Datei:Eduroam-unter-MacOS-02.png|links|mini|ohne|350px]]
-<br>
+<br clear=all>
 * '''Network name:''' eduroam
-* '''Security:''' WPA2-Enterprise
+* '''Security:''' Company-wide WPA2
 * '''Mode:''' EAP-TLS
-* '''Identity:''' Choose your network certificate.
+* '''Identity:''' Select your installed network certificate. The name ends with “@uni-paderborn.de”.
-* '''Unsername:''' Leave this field empty!
+* '''Username:''' Be sure to leave this field blank.
 <br clear=all>
-Click on '''"Connect"'''.
+Now click on '''Verbinden'''.