Skip to content

End-User Guide

This guide explains how users should connect their devices to eduroam.

Before You Start

  • connect to the SSID eduroam
  • use your full username in the format user@institution.ac.ke
  • use the password issued by your home institution
  • install the eduroam CAT profile if your institution provides one

eduroam CAT is the preferred setup method because it configures certificate trust and server-name validation correctly.

General Rules

  • never use a captive portal for eduroam
  • do not accept unexpected certificate warnings
  • remove old eduroam profiles before reinstalling a new one
  • if your password changes, update saved credentials on all devices

Windows

  • use the eduroam CAT installer where available
  • otherwise create a WPA2-Enterprise or WPA3-Enterprise profile for eduroam
  • ensure the username is entered as user@institution.ac.ke
  • verify the server certificate prompt matches your institution's documented settings

macOS

  • install the eduroam CAT profile if available
  • approve the profile and trust settings when prompted
  • confirm the identity format is user@institution.ac.ke
  • if prompted repeatedly for credentials, delete the old profile from System Settings and reconnect

Linux

  • use NetworkManager with WPA/WPA2 Enterprise
  • select the EAP method required by your institution, commonly PEAP or TTLS
  • validate the CA certificate and server name where provided
  • set anonymous identity only if your institution explicitly requires it

Android

  • Android works best with eduroam CAT
  • if configuring manually, choose the EAP method required by your institution
  • set domain, CA certificate, and identity exactly as instructed
  • avoid configurations that leave CA validation as "Do not validate"

iPhone and iPad

  • install the eduroam CAT or institutional mobile configuration profile where available
  • ensure the username includes the full realm
  • if the device warns about a certificate change, stop and verify with your IT team before proceeding

Common Problems

Username rejected

Use the full format:

user@institution.ac.ke

Certificate warning

Do not continue unless:

  • you installed the official profile
  • the certificate details match your institution's instructions

Device keeps failing after a password change

  • forget the eduroam network
  • remove the saved profile if necessary
  • reconnect with the new password or reinstall the CAT profile

When to Contact Support

Contact your home institution if:

  • your account or password is not accepted anywhere
  • your device profile is unavailable
  • you are unsure whether a certificate prompt is legitimate

Contact the visited institution if:

  • the eduroam SSID is missing at their site
  • the wireless signal is present but service is unavailable for multiple users