Getting Connected to eduroam / Universities via PCCW / Universities via Y5ZONE / Universities WiFi through a 802 dot1x connection - Windows XP Users

This document describes how to connect to eduroam / Universities via PCCW / Universities via Y5ZONE / Universities WiFi using a 802 dot1x secure connection via a Windows XP computer. Before using this service, you should first sign up for your Wi-Fi Account.

1. Install Hongkong Post Root CA Certificate (To Be Done Once Only)
2. Configuration of Windows XP (To Be Done Once Only)
3. Detect and Connect to eduroam / Universities via PCCW / Universities via Y5ZONE / Universities WiFi
4. Disconnect from eduroam / Universities via PCCW / Universities via Y5ZONE / Universities WiFi


1. Install Hongkong Post Root CA Certificate (To Be Done Once Only)

The Hongkong Post CA root certificate is trusted by Internet Explorer (IE) and you do not need to change any setting in your computer in order to accept this certificate. However, if you still don't find this certificate, please visit the website of Hongkong Post at http://www.hongkongpost.gov.hk/product/download/root/index.html.

For details about Hongkong Post Root CA Certificates, please refer to http://www.cuhk.edu.hk/ca/cuhkca-hkpost.html.

Top of Page


2. Configuration of Windows XP (To Be Done Once Only)

Note: You need to configure the Windows once, for the first time only, in order to enable Wi-Fi access. WinXP SP1 and SP2 users should also download and install Microsoft Wireless Client Update (KB917021) at http://support.microsoft.com/kb/917021/en-us

a .
Choose Start > Connect To > Wireless Network Connection.








OR
Click Control Panel > Network and Internet Connections > Network Connections.
b. Right-click Wireless Network Connection. Then select Properties.

c. In the Wireless Network Connection Properties dialogue box, click the Wireless Networks tab.

Check Use Windows to configure my wireless network settings.

Click Add.

Note: When setting up on a Dell laptop using Windows XP Wireless Configuration Utility, the Wireless Networks tab may not appear. This is due to the pre-existing Intel ProSet/Wireless Utility handling the wireless connections.

To turn of Intel ProSet/Wireless Utility, right-click the Intel ProSet/Wireless wireless icon next to the clock on the system tray and click "Use Windows to manage Wi-Fi".
d. Click the Association tab and enter the following.
  • Network name (SSID): eduroam or Universities via PCCW or Universities via Y5ZONE or Universities WiFi (please choose one of them)
  • Check Connect even if the network is not broadcasting .
  • Network Authentication: WPA*
  • Data encryption: TKIP*

* If you want a more secured connection, you can choose WPA2 for Network Authentication; and AES for Data encryption.

e. Click the Authentication tab

  • EAP type: Protected EAP (PEAP)
  • Un-check Authenticate as computer when computer information is available.
  • Un-check Authenticate as guest when user or computer information is unavailable.

Then click Properties to open the Protected EAP properties window.

f. In the Protected EAP properties window,

  • Check Validate server certificate.
  • Check Connect to these servers: and type in the box "dot1x.cuhk.edu.hk"
  • Check Hongkong Post Root CA from the Trusted Root Certification Authorities*.
  • Check Do not prompt user to authorize new servers or trusted certification authorities.
  • Select Authentication Method: Secured password (EAP-MSCHAP v2)
  • Un-check the following three items:
    - Enable Fast Reconnect
    - Enable Quarantine checks
    - Disconnect if server does not present cryptobinding TLV
  • Click Configure... to open the EAP MSCHAP v2 Properties window.

* If you cannot find Hongkong Post Root CA from the list, please first install the Certificate as mentioned in Step 1.

g. In the EAP MSCHAP v2 Properties window, un-check Automatically use my Windows logon name and password (and domain if any).

Click OK twice to close the two popup windows.

h. Click the Connection tab, check Connect when this network is in range.

Click OK twice to close the two popup windows.

Top of Page


3. Detect and Connect to eduroam / Universities via PCCW / Universities via Y5ZONE / Universities WiFi

a. Setup your computer with:
Choose Start > Connect To > Wireless Network Connection.








OR
Click Control Panel > Network and Internet Connections > Network Connections.

b. Double-click Wireless Network Connection.

c. Click View Wireless Networks. You should see the available wireless networks in the list.

Click Refresh network list if you cannot find eduroam or Universities via PCCW or Universities via Y5ZONE or Universities WiFi in the list.

d. Choose eduroam or Universities via PCCW or Universities via Y5ZONE or Universities WiFi and then click Connect at the bottom.

e. In the Enter Credentials window, enter the following.

  • User name:
    For eduroam / Universities via PCCW / Universities via Y5ZONE / Universities WiFi, it is
    your_Computing_ID@cuhk.edu.hk (e.g. s001234@cuhk.edu.hk)

  • Password:
    the password you have created for this programme.

  • Leave the Logon domain blank.

Click OK.

f. "Connected" will be shown in the Wireless Network Connection page after a successful connection.

Top of Page


4. Disconnect from eduroam / Universities via PCCW / Universities via Y5ZONE / Universities WiFi

a. Right-click Wireless Network Connection icon in the system tray.

Then select View Available Wirless Networks.

b. In the Wireless Network Connection window, select eduroam or Universities via PCCW or Universities via Y5ZONE or Universities WiFi (according to what you have connected to before).

Then click Disconnect.

c. The system will prompt you a message "Are you sure you wish to disconnect from the network 'eduroam' (or 'Universities via PCCW' or 'Universities via Y5ZONE' or 'Universities WiFi')?".

Click Yes.

Top of Page

Copyright (c) 2010. All Rights Reserved. The Chinese University of Hong Kong.