Permanent connection with certificate

TLS – Windows

ESTIMATED SETUP TIME 15 MINUTES
Setup the "polimi_protected" and "eduroam" wi-fi networks + the wired access
FAQ and support

Before starting: previous configurations

Have you already configured this device with Polimi networks? We recommend that you remove previous configurations.

Click on the wifi symbol
Select “Network Settings”
Under Wi-Fi select “Manage known networks”
If there are polimi-protected or eduroam networks, select and remove them.

Before starting: expired certificates

Do you have an expired certificate on your PC? Delete it before starting the setup.

the “Search” window type “certificate” and select it.
Select “Manage user certificates”
In the window that opens, click on “Personal” and then open the “Certificates” folder
All certificates installed on the PC are shown with their expiration date
Select those from the Politecnico that have expired and delete them.

Before starting: USB-Ethernet card

Do you use a USB-Ethernet card? To also enable wired access to the network, the card must be inserted and installed before starting the configuration.

STEP 1/7

Get a new certificate

Get a new personal Polimi certificate and write down the password (a new page will open).

Once the download is complete, install the certificate:

1- double click on the file (usually saved in the download folder)

2- click “Next”

3- enter the certificate password when prompted

4- continue clicking on “Next” without changing the default settings until finished

5- click “End”.

Wi-Fi network configuration

Repeat the following steps to configure both networks, eduroam and polimi_protected

STEP 2/7

Manually connecting to a wireless network

Using the Windows search function, search for and open “Control Panel”:

Select “Network and Internet” or, if not present, “Network and Sharing Center”.
Select “Set up new network connection”.
Select “Manually connect to a wireless network” and click Next.
Fill in the fields as follows:
- Network name: eduroam (or polimi-protected)
- Security type WPA2-Enterprise
- Encryption type: AES
Click “Add”.

You will be offered the “Change connection settings” option, select it.

STEP 3/7

Change connection settings: security

In “Change connection settings”:

Open the tab “Security”
complete the fields as follows:
- Security type: WPA2-Enterprise
- Encryption type: AES
- Choose a network authentication method:
  - select: Microsoft smart card or other certificate
  - click on Settings

Reference screen

STEP 4/7

Smart card or other certificate properties: settings

complete the fields as follows:

In the “When connecting” box:

Select: “Use a certificate on this computer”
Check: “Use simple certificates selection”

Check “Verify server’s identity by validating the certificate” and:

check “Connect to these servers”
write: wifi.polimi.it

Under “Trusted Root Certification Tasks”:

check “AAA Certificate Services”

Check:

Don’t promt user to authorise new servers
“Use a different username for the connection”

Press OK.

REPEAT FROM STEP 2/8 TO ALSO CONFIGURE THE SECOND WI-FI NETWORK or continue to set up wired access

Reference screen

To know

Upon first access to the wi-fi network

When you log in for the first time you will be asked if you want to connect using your certificate.

Select the certificate
indicate personcode@polimi.it as your username (e.g. 12345678@polimi.it)

Certificate expiry

The certificate expires two years after its generation, you will receive a notice via email approximately 15 days before. At the time of expiration the connection will stop working. Return to these pages to reactivate it. You can check the status or revoke in advance by connecting to the Polimi Personal Certificates application

Wired advanced access setup

STEP 5/7

Control panel

Search for “Services” with the PC function

In Services:

look for the item “Wired AutoConfig” and select it with a double click
Launch it and set it to autostart
Click OK.

Open the Control panel:

select “Network and Internet” or “Network and Sharing Center”.
in the menu on the left select the item “Change card settings”.

The PC’s network cards are shown:

Right click on “Ethernet”
select “Properties”.

Reference screen

STEP 6/7

Properties: authentication

In properties select “Authentication” complete the fields as follows:

Select “Enable IEEE 802 1x
Select: “remember credetials”
Choose a network authentication method:
- select: Microsoft smart card or other certificate
- click on Settings

Reference screen

STEP 7/7

Smart card or other certificate properties: settings

complete the fields as follows:

In the “When connecting” box:

Select: “Use a certificate on this computer”
Check: “Use simple certificates selection”

Check “Verify server’s identity by validating the certificate” and:

check “Connect to these servers”
write: wifi.polimi.it

Under “Trusted Root Certification Tasks”:

check “AAA Certificate Services”

Check:

Don’t promt user to authorise new servers
“Use a different username for the connection”

Click OK.

Reference screen

To know

Upon first access to the wi-fi network

When you log in for the first time you will be asked if you want to connect using your certificate.

Select the certificate
indicate personcode@polimi.it as your username (e.g. 12345678@polimi.it)

Certificate expiry

The certificate expires two years after its generation, you will receive a notice via email approximately 15 days before.
At the time of expiration the connection will stop working. Return to these pages to reactivate it.

You can check the status or revoke in advance by connecting to the Polimi Personal Certificates application