Carnegie Mellon University

Connect to the Wireless Network

Follow the appropriate steps for your device/operating system.

  1. Locate CMU-SECURE in your Wi-Fi list.
  2. Click Connect.
  3. When prompted, enter your Andrew userID and passwordand then click OK.
  4. If prompted with a "Security Alert" click Details.
  5. Verify the certificate
  6. Click Connect.

Still can't connect? Follow the manual connection steps. 

  1. Locate CMU-SECURE in your Wi-Fi list.
  2. Enter your Andrew userID and password.
  3. Click Show Certificate.
  4. Verify the certificate and click Continue.
  1. Find CMU-SECURE in your Wi-Fi list.
  2. Enter the following information (terminology may vary; your computer may not require all these settings):
    • Wireless security: WPA2 Enterprise
    • Authentication: Protected EAP (PEAP)
    • CA certificate: AddTrust External CA Root (See step 3 for details.)
    • PEAP Version: Automatic or Version 0
    • Inner/Phase 2 authentication: MSCHAPv2
    • Username: Andrew userID
    • Password: Andrew password
  3. Do one of the following:
  1. Locate your wireless configuration settings.
  2. Find CMU-SECURE in your Wi-Fi list.
  3. Enter the following information.
    Username: Andrew userID
    Password: Andrew password
  4. If prompted, verify and accept the CMU wireless certificate.
  1. Locate your wireless configuration settings.
  2. Find CMU-SECURE in your Wi-Fi list.
  3. Enter the following information.
    Note: Terminology may vary across devices. Contact your vendor for terminology specific to your device.
    • EAP method: PEAP
    • Phase 2 authentication: MSCHAPV2
    • CA certificate: Use System Certificate
    • Domain: wireless.cmu.edu
    • User certificate: Unspecified
    • Identity: Andrew userID
    • Password: Andrew password
  4. If prompted, verify and accept the CMU wireless certificate.
    Note: You may not be able to select a CMU wireless certificate on some Android devices, but you will be connected to CMU-Secure after you compete Steps 1-3.
  1. Locate your wireless configuration settings.
  2. Find CMU-SECURE in your Wi-Fi list.
  3. Enter the following information.
    Note: Terminology may vary across devices. Contact your vendor for terminology specific to your device. Your device may not require ALL settings.
    • Wireless security: WPA2 Enterprise
    • Authentication: Protected EAP (PEAP)
    • CA certificate: AddTrust External CA Root or Unspecified
    • User certificate: Unspecified
    • Inner/Phase 2 authentication: MSCHAPv2
    • Username/Identity: Andrew userID.
    • Password: Andrew password.
  4. If prompted, verify and accept the CMU wireless certificate.

The legacy CMU (SSID) wireless network requires registration, follow the steps below to register and connect your device:

  1. Go to https://netreg.net.cmu.edu/ to register your device.
  2. Log in your Andrew userID and password.
  3. Click Register New Machine.
  4. Under Select the Network, select Legacy Wireless Network from the drop-down and click Continue.
  5. Enter the Hostname and Hardware Address (MAC) for the device.
  6. Select or change your Affiliation from the Department drop-down menu.
  7. Click Continue and follow the listed instructions.
  8. After 30 minutes, connect your device to the CMU SSID wireless network.

Verify the wireless.cmu.edu certificate is as follows:

  • The Root CA is listed as"USERTrust RSA Certification Authority" or "AddTrust External CA Root"
  • The server SHA1 Thumbprint/Fingerprint for the wireless.cmu.edu certificate is
    07:15:C1:BC:A3:55:DB:48:15:F7:83:36:24:90:AC:
    11:7D:CE:D9:A4

Step 1: Remove/forget the existing CMU-SECURE Wi-Fi profile.

Windows 10

  1. Select Network Settings (Wi-Fi menu).
  2. Select Manage Wi-Fi Settings.
  3. Scroll to Manage known networks.
  4. Select CMU-SECURE and select Forget.

Windows 8

  1. Click the Wi-Fi signal.
  2. Right-click CMU-SECURE and select Forget this network.

Windows 7

  1. Right-click the Wi-Fi signal and select Open Network and Sharing Center.
  2. Select Manage wireless networks
  3. Right-click CMU-SECURE and select Remove network.

Step 2: Setup the Connection

  1. Right-click the Wi-Fi signal and select Open Network and Sharing Center.
  2. Select Set up a new connection or network.
  3. Select Manually connect to a wireless network and click Next.
  4. Enter the following:
    • Network Name: CMU-SECURE
    • Security Type: WPA2-ENTERPRISE
    • Encryption Type: AES
  5. Click Next.
  6. Select Change connection settings.
  7. Click Security.
  8. Verify Authentication Method is PEAP.
  9. Click Settings and enter the following:
    • Verify the server's identity by validating the certificate: checked
    • AddTrust External CA Root: checked
    • Authentication Method: EAP-MSCHAP v2
  10. Click Configure and uncheck Automatically use my Windows logon. Click OK.
  11. Click OK.
  12. Click Advanced Settings.
  13. Check Specify authentication mode and select User Authentication.
  14. Do the following:
    • Windows 10 - Click Save credentials and enter your Andrew userID and password. Click OK and Close to exit.
    • Windows 7 & 8 - Click OK and Close to exit. Select CMU-SECURE from the Wi-Fi list and click Connect. Enter your Andrew userID and password when prompted.