Wireless Configuration for Windows Vista

This document describes how to setup and configure the native PEAP
Client in Windows Vista in order to connect to the SLU secure wireless
network. These instructions are specifically designed for a laptop
running the Microsoft Windows Vista operating system. They also assume
that you have administrative privileges to configure the settings.

This document describes connection settings for the new secure wireless
infrastructure (slu-secure), this has replaced the secure wireless
network (slu-wlan) from last year. The slu-wlan network was phased out
over the course of the Spring 2007 semester.

Manual Root certificate installation for Windows

Windows
Vista requires the installation of a trusted certificate created on the
authentication server to properly authenticate wireless users.
Successful completion of the following steps is required to connect to
the "slu-secure" wireless network.

  • Connect to the "guest" wireless network or via ethernet cable
  • Download the root certificate file from the infotech download site at https://download.stlawu.edu/network/wlan.cer
  • At the prompt, login using your network username and password
  • Save the file, wlan.cer to your computer desktop
  • Go to the desktop and double click the wlan.cer file to open the certificate

    • Certificate_Icon
    certificate_open

  • Click Install Certificate... to install the certificate on your computer

    • certificate_installation

  • Click Next on Certificate Import Wizard window
  • Chose the second option,Place all certificates in the following store and then click Browse...

    • certificate_import

  • Make sure you follow this particular instruction very carefully to put the certificate in the right place!
  • Click on Show physical stores and expand Trusted Rood Certification Authorities by clicking the plus (+) on the left, then select Local Computer, click OK

    • certificate_store

  • Click Next then Finish to complete the certificate installation
  • Click OK to the Import Successful window
  • Click OK to the certificate window

 

Configure wireless network settings - "slu-secure"

Windows
Vista will automatically search for any available wireless connections
when you power on your wireless equipped computer. If a wireless
connection is been located, Windows Vista will inform you that a
connection has been made. However, you still need to set up the PEAP
client's configuration.

  • On your desktop, click on the Start Button
    • Click on Control Panel
    • Double click the Network and Sharing Center icon
    • On the left side of this panel - Click on Manage wireless networks
      • wlan_config
    • Click on Add
    • add_network
    • Click on Manually create a network profile
    • create_profile
      • The wireless network information window appears
        • Make sure the following settings are accurate:
          • Network Name: slu-secure
          • Security Type: WPA2-Enterprise
          • Encryption Type: AES
        • Check the box for Start this connection automatically and click Next
      • Click on Change Connection Settings
      • Click on the Security Tab
      • Select Protected EAP (PEAP) from the drop down menu and Click Settings
      • wlan_config
  • The Protected EAP Properties box pops up
    • Make sure the following settings are accurate:
      • Check Validate server certificate
      • Scroll through the Trusted Root Certificate Authorities section and check the cerftificate labeled ias01.stlawu.local (this is the name of the certificate installed by the directions above)
      • Select Secure password (EAP-MSCHAP v2) from the Select Authentication Method: drop down menu and Click Configure
      • peap-properties
      • Un-check Automatically use my Windows logon mape and password (and domain if any) and then Click OK
  • Click OK to close all boxes and then close the Network and Sharing Center window

Log in to the wireless network

  • Within
    a couple of minutes, you will notice an information balloon in the
    system tray (at the right bottom corner of the screen) -- Click on it
  • additional-info
  • The credentials logon box appears
    • Enter your your network login name and password
    • Click OK to connect to the network
    • login

Additional information

  • If you are experiencing problems, return to configuration instructions and remove any of the preferred networks that show as guest and/or slu-secure

    • Continue from Configure wireless network settings for "slu-secure" network adding the "slu-secure" configuration again
  • Login information connecting to the PEAP client is automatically stored by the operating system
    on the local drive

    • If
      you successfully connect to the network, Windows XP will try to
      reconnect you to the secure network via PEAP every time you reboot
    • You do not have to enter your login information a second time
    • Friends or colleagues will be able to log on to the wireless network as if they are you when using your laptop
    • You
      will need to regenerate a new password if the laptop is stolen or lost
      to ensure security access on your account to the secure wireless network
  • If
    you cannot browse any web pages after connecting to the secure wireless
    network, but the wireless network icon indicates that it is connected
    and the signal strength is good, make sure that your machine is getting
    a proper IP address

    • To get your IP address, you can do the following:
      • Double click the wireless network icon in your system tray (i.e. right bottom corner of the screen)
      • Click on the Support tab
      • This will show you your IP address
        • Make sure that the address starts with 010.xx.xxx.xxx
        • If
          it doesn't start with 010.xx.xxx.xxx, then something is wrong with the
          configuration and you are not connected to the secure wireless network
    • If you have problems authenticating on the secure Wireless Network, please contact the IT HelpDesk at 5770.