The RADIUS server certificate was replaced on 17 December 2025 at 8:00 a.m. After that, your device may prompt you to verify the certificate before trusting it. You can find the current fingerprint for the certificate here:
You do not need to replace any network certificates on your device. Most devices should still be able to connect to eduroam without any problems. More details on how individual devices will behave can be found here:
For details click here
Depending on the device, you may have to reconnect to eduroam, select the certificate again or trust the certificate.
macOS
- Zertifikat einblenden to check certificate
- Continue to trust the certificate
- You may need to select your certificate again afterwards.
- Do not enter a username to log in to eduroam!
iPhone und iPad
- Display certificate to check the certificate
- Accept certificate to trust the certificate
Windows
- Show certificate details to check the certificate
- Connect to trust the certificate
This tutorial describes how to set up the Wi-Fi eduroam on android.
Android is used by many different manufactureres and therefore can look very different. We can't offer instructions for every device.
Video tutorial[Bearbeiten | Quelltext bearbeiten]
Step-by-step description[Bearbeiten | Quelltext bearbeiten]
Create certificate[Bearbeiten | Quelltext bearbeiten]
Bevore setting up eduroam, we must create and install a certificate. You can use mobile data for this. Otherwise use webauth.
Visit the Serviceportal and log in with your Uni-Account.
We recomend using the "Google-Chrome-Browser". Other browsers may also work.
- Click on the displayed icon.
- Click on "User Selfcare"
- Click on "Network Settings".
- Click on "Create network certificate".
- Name your certificate.
- Choose "Version 1" as the data format.
- Click on "Send Certificate".
Hinweis: Create a certificate for every device. A device isn't used anymore? A device got lost or stolen? Retract your certificate!
Install user certificate[Bearbeiten | Quelltext bearbeiten]
- A new certificate was created.
- Copy the "Import Passwort".
- Click on "Download certificate".
- Use your "Import Passwort" to open the certificate.
- Click on "Ok".
The dialogue is not displayed?
Normally, the certificate import assistant opens now. If this isn't the case: Swipe down from the top. Your certificate should appear as a download in the infocenter. Open it with a click.
- Name your certificate in order to find it again - e.g. Eduroam.
- Choose "WLAN" or "Wi-Fi".
- Click on "Ok".
- Copy the identifier named "Identität".
- We will need it in the next step.
Set up eduroam[Bearbeiten | Quelltext bearbeiten]
After installing the certificate, you can set up eduroam.
- Open the Wi-Fi settings
- Select "eduroam".
Choose the following settings:
- EAP-Methode: TLS
- Identitiät: Insert from clipboard. We copied it in the step before. Alterternatively, you can enter benutzername@uni-paderborn.de. Replace benutzername with your personal username for the Uni-Account.
- CA-Zertifikat: Systemzertifikate verwenden
- Domäne: radius.uni-paderborn.de
- Benutzerzertifikat: eduroam
Info: If you can't find these setting - Click on Additional settings at first.
If the procedure described above doesn't work, you'll find two additional installation options here.
Variant 1
On older Android devices, the required HARICA CA certificate is not present. You can install it manually as follows:
- Install the network certificate as described above.
- Additionally, click here on "Download CA certificate"
- Now open the Android settings to install the CA certificate manually.
- The menu is located in different places depending on the Android version and manufacturer.
- The easiest way to do this is to search for "Certificate" in the Settings
- Then select the menu item "Install CA Certificate from Store" - this may also be named differently depending on the version.
- Now click on CA Certificate
- Now select the certificate "HARICA-TLS-Root-2021-RSA.crt" that you just downloaded.
```
Now configure eduroam with the following settings:
- EAP Method: TLS
- Identity: We already copied this in a previous step - paste from clipboard. Alternatively, enter username@uni-paderborn.de. Replace username with your personal username for your university account.
- CA Certificate: Use system certificates
- Domain: radius.uni-paderborn.de
- User Certificate: You named this yourself. If you followed the recommendation, this is called "eduroam".
Variant 2
If the menu item "Use CA certificate system certificates" is not present in your Wi-Fi settings, or if the connection via this option does not work, you can install the CA certificate as a Wi-Fi certificate and select it manually. To do this, proceed as follows:
- Install the network certificate as described above.
- Additionally, click here on "Download CA certificate"
- Now open the Android settings to install the CA certificate manually.
- The menu is located in different places depending on the Android version and manufacturer.
- The easiest way to find it is to search for "Certificate" in the Settings
- Then select the menu item "Install CA certificate from storage" - this may also be named differently depending on the version.
- Now click on Wi-Fi certificate
- Now select the certificate "HARICA-TLS-Root-2021-RSA.crt" that you just downloaded.
```
- Name the certificate "HARICA".
Next, open the Wi-Fi settings and select eduroam. Configure the network with the following settings:
- EAP Method: TLS
- Identity: We already copied this in a previous step - paste from clipboard. Alternatively, enter username@uni-paderborn.de. Replace username with your personal username for the university account.
- CA Certificate: You named this yourself. If you followed the recommendation, this will be called "harica"
- Domain: radius.uni-paderborn.de
- User certificate: You named this yourself. If you followed the recommendation, this will be called "eduroam"
Delete webauth[Bearbeiten | Quelltext bearbeiten]
- If you used webauth - Delete it afterwards.
- Log press on webauth and click on Delete.
- This can also be labled as Forget.
Alternatives[Bearbeiten | Quelltext bearbeiten]
On Android 9 the CA certificate may not be needed. You can choose "Use network certificates" instead.
Troubleshooting[Bearbeiten | Quelltext bearbeiten]
No connection to eduroam
Try the following steps:
- Deactivate and activate Wi-Fi
- Deactivate and activate Airplane Mode
- Perform a restart.
Certificate can't be installed
Do you get the error message "Certificate can't be read"? Try to install the certificate manually. Download the certificate. Ignore the error message.
Open the settings. The path can differ but open
Settings /Additional Settings / Security
Click on Install certificates from SD-Card and install the downloaded certificates.
Info: Can't find the option in the menu? Search for it.
Certificate: Password wrong
Do you get the error message "Password wrong". Don't use the clipboard but type in the password manually.
That does't help either? There is no fix for this problem yet.
