Configuration with certificate – Windows

“polimi_protected” and “eduroam” Wi-Fi networks

Wired acces

15 minutes estimated

Need help?

Check out our frequently asked questions or submit a support request.

Before you begin

Complete these checks before starting the configuration

How to remove known Wi-Fi networks

  1. Tap the Wi-Fi signal icon
  2. Select “Network settings”
  3. In Wi-Fi select “Manage known networks”
  4. If the “polimi-protected” and/or “eduroam” networks are present, select them and remove them.

How to delete expired Politecnico certificates from your PC

  1. In the “Search” box on your PC, type “Certificates”.
  2. Select “Manage user certificates”.
  3. In the window that opens, click on “Personal” and then open the “Certificates” folder.
  4. All certificates installed on your PC are displayed with their expiration date.
  5. Select the expired Politecnico certificates and delete them.

To enable wired network access, the card must be inserted and installed before starting the configuration.

1/7

Install the certificate

1- double click on the file (usually saved in the download folder)

2- click “Next”

3- enter the certificate password when prompted

4- continue clicking on “Next” without changing the default settings until finished

5- click “End”.

2/7

Manual connection to the Wi-Fi network

Using the Windows search function, search for and open “Control Panel”:

  1. Select “Network and Internet” or, if not present, “Network and Sharing Center”.
  2. Select “Set up new network connection”.
  3. Select “Manually connect to a wireless network” and click Next.
  4. Fill in the fields as follows:
    • Network name: eduroam (or polimi-protected)
    • Security type WPA2-Enterprise
    • Encryption type: AES
  5. Click “Add”.

You will be offered the “Change connection settings” option, select it.

3/7

Change connection settings: security

In “Change connection settings”:

  1. Open the tab “Security”
  2. complete the fields as follows:
    • Security type: WPA2-Enterprise
    • Encryption type: AES
    • Choose a network authentication method:
      • select: Microsoft smart card or other certificate
      • click on Settings

Reference screen

4/7

Smart card or other certificate properties: settings

Complete the fields as follows:

In the “When connecting” box:

  • Select: “Use a certificate on this computer”
  • Check: “Use simple certificates selection”

Check “Verify server’s identity by validating the certificate” and:

  • check “Connect to these servers”
  • write: wifi.polimi.it

Under “Trusted Root Certification Tasks”:

  • check “AAA Certificate Services”

Check:

  • Don’t promt user to authorise new servers
  • “Use a different username for the connection”

Press OK.

Reference screen

Click “Advanced settings” and:

  • check “Specify authentication mode”
  • click OK to complete.

Reference screen

You have completed the configuration of your first Wi-Fi network

  • Repeat from step 2/7 to configure the second Wi-Fi network as well.
  • Proceed to configure wired access.
5/7

Control panel

Search for “Services” with the PC function

In Services:

  1. look for the item “Wired AutoConfig” and select it with a double click
  2. Launch it and set it to autostart
  3. Click OK.

Open the Control panel:

  1. select “Network and Internet” or “Network and Sharing Center”.
  2. in the menu on the left select the item “Change card settings”.

The PC’s network cards are shown:

  1. Right click on “Ethernet”
  2. select “Properties”.

Reference screen

6/7

Properties: authentication

In properties select “Authentication” complete the fields as follows:

  • Select “Enable IEEE 802 1x
  • Select: “remember credetials”
  • Choose a network authentication method:
    • select: Microsoft smart card or other certificate
    • click on Settings

Reference screen

7/7

Smart card or other certificate properties: settings

Complete the fields as follows:

In the “When connecting” box:

  • Select: “Use a certificate on this computer”
  • Check: “Use simple certificates selection”

Check “Verify server’s identity by validating the certificate” and:

  • check “Connect to these servers”
  • write: wifi.polimi.it

Under “Trusted Root Certification Tasks”:

  • check “AAA Certificate Services”

Check:

  • Don’t promt user to authorise new servers
  • “Use a different username for the connection”

Click OK.

Reference screen

Click “Additional settings” and:

  • check “Specify authentication mode”
  • click OK to complete.

Reference screen

You have finished configuring wired network access.

Upon first access to the wi-fi network

When you log in for the first time you will be asked if you want to connect using your certificate.

  • Select the certificate
  • indicate personcode@polimi.it as your username (e.g. 12345678@polimi.it)

Certificate expiry

The certificate expires two years after its generation, you will receive a notice via email approximately 15 days before.
At the time of expiration the connection will stop working. Return to these pages to reactivate it.

You can check the status or revoke in advance by connecting to the Polimi Personal Certificates application