Option 1: Automatic Setup

  1. Prerequisites:

    For CentOS, Fedora, or Ubuntu you’ll need to have the following packages [1] installed:

    • python or python3

    • openssl

    • xwininfo (Fedora 31+)

    • firefox-x11 (fedora 31+)

  2. Connect to the UVa Guest Wireless Network:

    After selecting "UVa Guest" open a web browser and go to in.virginia.edu/guest. Click "Connect Now" to agree to the terms and connect. The next step will also work if you are connected to the "Wahoo" network, but it won’t work if you’re on the "UVa Wifi Setup" network.

  3. Download the Setup Tool:

    Point a web browser at https://discovery.phys.virginia.edu/compfac/faq/uvaphys_JoinNow.run and download the file. It will be named "uvaphys_JoinNow.run".

  4. Connect to the UVa Wifi Setup Network:

    Warning
    After connecting to the "UVa WiFi Setup" network your browser might show you a box with a button labeled "Non-specific OS". Just ignore this box and close the browser at this point.

    The following will also work if you’re connected to the "Wahoo" network, but it won’t work if you’re on the "UVa Guest" network.

  5. Run the Setup Tool:

    (Note that you should not use "sudo". This should be done using your own, unprivileged user account.)

    Go to the directory where the downloaded file lives, and type:

    sh uvaphys_JoinNow.run

    (Note: some browsers might rename the file as "uvaphys_JoinNow.txt". In that case, use this name.)

  6. Follow the resulting instructions. At the end of this process, your computer should be configured to connect to Eduroam.

Option 2: Manual Setup

  1. Prerequisites:

    Everything you need should already be present in the default set of packages installed by most distributions, with these exceptions:

    • Ubuntu 22.04:

      For Ubuntu 22.04 you’ll need to downgrade the wpasupplicant package and install the libssl1 package. The required wpasupplicant package can be found here: http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl1.1_1.1.1l-1ubuntu1.3_amd64.deb, and the libssl1 package can be found here: http://mirrors.kernel.org/ubuntu/pool/main/w/wpa/wpasupplicant_2.9.0-21build1_amd64.deb.].

      After downloading these files, install them by typing:

      sudo apt install ./wpasupplicant_2.9.0-21build1_amd64.deb ./libssl1.1_1.1.1l-1ubuntu1.3_amd64.deb

      and prevent future updates by typing:

      echo wpasupplicant hold | sudo dpkg --set-selections

      Alternatively, you can try the procedures here, although I haven’t found them to work:

      These changes are necessary because UVa’s eduroam uses an SHA-1 hash which newer cryptography software disables by default.

    • Fedora 31 and higher:

      For recent Fedora versions you’ll need to install the openssl package from the Fedora repositories:

      sudo dnf -y install openssl

      and you’ll need to change your cryptography settings by typing:

      sudo update-crypto-policies --set LEGACY

      As with Ubuntu 22.04, this change is necessary because of the SHA-1 hash that UVa uses.

  2. Connect to the UVa Wifi Setup Network:

    Warning
    After connecting to the "UVa WiFi Setup" network your browser might show you a box with a button labeled "Non-specific OS". Just ignore this box and close the browser at this point.

    The following will also work if you’re connected to the "Wahoo" network, but it won’t work if you’re on the "UVa Guest" network.

  3. Get a Personal Certificate:

    Point a web browser at https://cloud.securew2.com/public/82116/limited/?device=Unknown and follow the instructions there.

    new cert gen 1

    Note that you’ll be asked to choose a passphrase for the certificate. The passphrase must be shorter than 15 characters. If you attempt to enter a longer passphrase, you’ll see a "passphrase invalid" message.

    new cert gen 2

    At the end, this process should download a file with a name ending in ".p12".

  4. Connect to the UVa Guest Wireless Network:

    After selecting "UVa Guest" open a web browser and go to in.virginia.edu/guest. Click "Connect Now" to agree to the terms and connect. The next step will also work if you are connected to the "Wahoo" network, but it won’t work if you’re on the "UVa Wifi Setup" network.

  5. Get get the USHER Certificate:

    Point a web browser at http://h1.usherca.org/aia/ca.pem and download a file named "ca.pem".

  6. Configure Your Eduroam Connection:

    Click the network icon (nm-applet) on your task bar. Configure your Eduroam connection as shown here (note several caveats below the figure):

    eduroam wifi config dialog
    • Your "identity" should be in the form mst3k@virginia.edu. Note that all letters must be in lower case.

    • The "password" should be the passphrase you entered when you created your certificate, above.

    • When you start, you might have to put your p12 file into the "User Certificate" field to make the other fields available. That’s OK. It will be ignored later.

    • Before clicking "Save", make sure you go to the "General" tab and UNcheck the box labeled "Available to all users" (failing to do this might prevent Eduroam from working).

      Save your changes.


1. With Ubuntu 22.04, you’ll currently need to downgraded the wpasupplicant package to version 2.9 and install the libssl1 package. The uvaphys_JoinNow script will offer to do this for you automatically.