Mac OSX Snow Leopard Configuration for SFUNET-SECURE and eduroam

What do I need first?

  1. Mac OS X version 10.6 or greater (Note: You MUST have the most recent updates)
  2. TCP/IP settings set to DHCP (Obtain an IP Address Automatically)

Setting up SFUNET-SECURE (or eduroam) wireless on your computer

  1. Through the AirPort icon in the Finder menu, select Open Network Preferences.

  2. The Network dialogue should appear. Click on the AirPort icon.

  3. Click on the Advanced button. The Airport configuration screen should appear.

  4. Click on the 802.1X button. Click the + button to add a new user profile. Call it SFUNET-SECURE (or eduroam).

  5. Enter your information to match the screen shown below. Make sure you have the following fields configured:

    • User Name: your SFU Computing ID
    • Password: your SFU Computing password
    • Wireless-Network: SFUNET-SECURE (or eduroam)
    • Authentication: TTLS checked, PEAP unchecked


  6. Under the Authentication list box, highlight the TTLS entry and click the Configure button. Change the TTLS Inner Authentication dropdown to PAP. Enter your SFU computing ID as the Outer Identity. Click OK when finished.

  7. Click OK (or Close) to apply the 802.1X settings you just made. This will return you to the Network window. Highlight the AirPort icon again and click the Advanced button.

  8. Click the AirPort tab. You will likely see all of the wireless networks you have connected to in the past in your Preferred Networks list. If there is an entry for SFUNET-SECURE (or eduroam), please remove it. Once you have done this (or if SFUNET-SECURE or eduroam did not exist), click the + button to add a new network.

  9. Enter SFUNET-SECURE (or eduroam) in the Network Name field. Change the Security setting to WPA2-Enterprise.

  10. Once you change the Security field to WPA2 Enterprise, additional configuration options will appear. Fill out the remaining fields with the following information:

    • Username: Your SFU Computing ID
    • Password: You SFU Computing password
    • 802.1X: The SFUNET-SECURE (or eduroam) profile you created in step 6 (should be SFUNET-SECURE or eduroam)

  11. Click the Add button when complete. Under some circumstances, you may be prompted with an "Add to keychain request". If so, click Allow

  12. You should now be able to connect to SFUNET-SECURE (or eduroam) via the AirPort icon in the Finder menu. On your first connection to SFUNET-SECURE (or eduroam) you will be prompted to accept the security certificates. Click on Show Certificate.

  13. Click the Always trust "[server name]" check box. Depending on which campus you are connecting at, the certificate may be different. When you are finished, click Continue.

  14. You should now be able to connect to SFUNET-SECURE (or eduroam). However, because authenticating to wireless is a time-sensitive procedure, you may find that you are not successfully on the first try after doing the initial setup above. Disabling and re-enabling your AirPort adapter should clear this problem. It is also possible that you may have difficulty getting an IP address (you will get an auto-assigned private address instead) after initially configuring SFUNET-SECURE (or eduroam). In this case you may have to connect to another wireless network (such as SFUNET) and then back.