Instructions: eduroam for Android
The Android operating system has many versions and variants from various manufacturers. In principle, the connection to the eduroam network requires creating a profile with the necessary parameters.
Technical specifications of the eduroam network settings
- Security: WPA2/WPA3 Enterprise
- Authentication: PEAP
- Domain: radius.muni.cz
- Certificate: ISRG Root X1 (PEM format)
- Internal authentication: MSCHAPv2
- Username: UČO@muni.cz
- Password: secondary password
To make it easier to create such a profile, the geteduroam or eduroamCAT applications were developed. For most users, we recommend geteduroam, which is simpler and supported on newer Androids. The older eduroamCAT application can be tried in case of problems, it contains more information about the current connection status. Settings are also possible manually, see below.
The following procedures are shown for Android 12, in other versions, each screen may be slightly different, but the setting procedure is basically the same. If necessary, other similar instructions for older versions can be found on the eduroam.cz website.
Alternatively, the profile can be downloaded from the cat.eduroam.org website or you can use the QR code.
In your networks list pick the eduroam network an set up its configuration according to the following pictures.
Pick PEAP as the EAP method. As Phase-2 authentication pick MSCHAPv2. As the certificate select Use system certificates, use the radius.muni.cz domain, enter your identity in the format of UČO@muni.cz and secondary password. and click Connect.
For older devices or for more precise configuration, you can install and select a specific ISRG Root X1 certificate instead of System Certificates, which you can download from this link.
Depending on the Android version and device manufacturer, you can install it in a similar way as described below.
Logging in to the eduroam network without certificates may risk attacks on the connected device. Please do not connect without them.
The eduroam network is protected by a firewall, but it is still very important to secure your own computer with a firewall as well.