Change from WPA to WPA2

From 2 December 2013, the eduroam network at the University will no longer support WPA Enterprise (TKIP) encryption. This page gives instructions for users of the old (and now deprecated) "Eduroam Easy Installer" for Windows on how to amend their system settings to use WPA2 Enterprise (AES) encryption. The eduroam network at the University will support both WPA2 and WPA until 2nd December, so these settings can be changed at any time without affecting your ability to connect.

Note: Only Windows systems that have been configured using the old "Eduroam Easy Installer" need to have their settings changed. Systems configured using the new wizards (Eduroam CAT), or non-Windows platforms should automatically choose the correct encryption methods.

Jump to:

Background

WPA Enterprise uses the Temporal Key Integrity Protocol (TKIP), which was designed as a stopgap security protocol to ease the transition between the now obsolete WEP encryption and the more secure CCMP / AES encryption. TKIP is no longer considered cryptographically secure and was deprecated in the 2012 revision of the Wi-Fi standards.

In order to remain compliant with the global eduroam technical specification, the University must switch off support for TKIP by the end of December 2013.

Change your system settings: Windows Vista / 7

To change your Windows Vista / 7 system to use WPA2 Enterprise with CCMP / AES:

  1. Right-click the tray icon for your Wi-Fi connection and select Open Network and Sharing Center from the menu.
  2. Choose Manage wireless networks from the list of tasks.
  3. In the window that appears, right-click on the eduroam entry.
    Networks list
  4. Choose Properties from the pop-up menu, then navigate to the Security tab.
  5. Change the Security type setting to WPA2-Enterprise.
  6. Change the Encryption type setting to AES.
    Settings
  7. Press OK, then close the manage wireless networks and Network and Sharing Center windows.

Your device is now configured to use WPA2 Enterprise security and will continue to work correctly after 2nd December.

Change your system settings: Windows XP SP3

To change your Windows XP SP3 system to use WPA2 Enterprise with CCMP / AES:

  1. Right-click on the tray icon for the wireless card and select Open Network Connections. Alternatively, open Control Panel and select Network Connections.
  2. Locate the icon for the wireless card, right-click on it and select Properties.
  3. In the window that appears, choose Wireless Networks.
  4. Choose the eduroam network from the list and press Properties.
  5. Set Network Authentication to WPA2 and Data Encryption to AES.
  6. Press OK twice.

Your device is now configured to use WPA2 Enterprise security and will continue to work correctly after 2nd December.

Page navigation

QR Code

QR Code for this page