Body
With the sunset of the Tempest wireless network, Eduroam will be the preferred wireless for all University-managed macOS and iOS devices. Devices that are managed by the University of Maine System will have the necessary certificates and configurations applied to them to automatically connect to Eduroam when in range. Users will no longer need to connect to Eduroam manually or enter credentials.
Detailed Information
Troubleshooting EduRoam
The managed Eduroam configuration will be deployed to all devices beginning November 20th, 2024. Existing devices will get their profile installed and have their connection updated immediately.
Devices that are newly deployed and being provisioned will have the Eduroam configuration applied during enrollment. Staff will need to connect to MaineEDU-Guest or a hardwired connection to communicate with Apple and start the enrollment process, but the configuration and certificates will be applied during the enrollment step and will automatically switch to Eduroam once installed.
A configuration profile will apply the necessary certificates and configuration for eduroam and will switch to the managed configuration. Device certificates renew every 6 months automatically. The computer just needs to be on an internet connection to receive it.
The Wi-Fi profile will be installed, but the connection will remain turned off and not connected until you turn it back on. Wired connections take priority over Wi-Fi and will not activate if disabled.
What happens if my computer has been powered off and the certificate did not renew?
What happens if I am using the computer when the new profile is deployed?
What happens if I am prompted for a certificate or my computer fails to connect to eduroam?
What to do if you accidentally put in your userid instead of Serial Number when prompted?
Certificates are set to renew every 6 months, however, if a device is powered off during that time, then they just need to be powered on and connect to an internet connection so they can check in with the device management system. This could be a phone hotspot, a home internet, public internet, MaineEDU-Open, MaineEDU-Guest, or wired connection on campus. The vpn is not required for a device to check in. Once it has been powered on and checked in (about 15-30 min), a new certificate will be installed and the device can be used on Eduroam again.
- To verify your new certificate is installed, open Keychain Access (command + space and type keychain).
- Enter your login password for the computer.
- Click on System from the side bar of the application.
- Click the certificates tab at the top of the window.
- Check for a certificate in the form of {SerialNumber}@uad.maine.edu.
- The expiration of this certificate should be updated, if it hasn't updated and it has been more than an hour, contact the IT Help Desk.
When the Eduroam profile is deployed to the computer, Eduroam will be configured as a managed network and use the certificate to authenticate. If you were previously using Eduroam, your connection will be updated automatically and will use the device certificate the next time it reconnects. There is a chance of a momentary drop lasting a few seconds where Eduroam will reconnect with the updated settings, but this has not been the typical experience of the pilot users.
If you are at home work using another network connection on campus (ie tempest, medev, or MaineEDU-Guest), the connection will not automatically join Eduroam until the next time the device disconnects from the network. This could be when the computer goes to sleep, leaves network range, or reboots.
If the computer was previously using eduroam with a user certificate, an item was saved to the keychain. In most cases, this item will be overwritten, but sometimes it is not. To fix this issue follow the steps below.
- Open press command space and type "keychain access".
- Select Open Keychain access from the popup on macOS 14 and newer.
- Enter your computer user password and press enter.
- Click on login from the left menu bar.
- Click on Passwords from the top of the window.
- Look for anything listed as eduroam or user@maine.edu with a kind listed as "802.1XPassword".
- If the item is your serialnumber@uad.maine.edu, leave that one.
- Highlight and delete the item found.
- Turn wifi off and back on from the menu bar next to the clock.
- If eduroam does not automatically connect, select it from the list.
- Click okay and your computer will overwrite any previous eduroam configuration.
Follow the steps as in What happens if I am prompted for a certificate or my computer fails to connect to eduroam? up above.
Environment
- University-managed macOS and iOS devices, including Apple laptops, desktops, and iPads. iPhones are not currently managed.