Using WPA Enterprise on Windows XP to Access Cleveland State University’s Wireless Network (WoWnet)

What is WPA (Wi-Fi Protected Access)?
WPA is a powerful, standards-based, interoperable security technology for Wi-Fi networks. It provides strong data protection by using encryption as well as strong access controls and user authentication. WPA can be enabled in two versions - WPAPersonal and WPA-Enterprise. WoWnet utilizes WPA Enterprise (aka 802.1X WPA). WPA-Enterprise verifies network users through a server. WPA utilizes 128-bit encryption keys and dynamic session keys to ensure your wireless network's privacy and enterprise security.

Prerequisites
1. Windows XP SP2 2. A Wi-Fi certified Wireless network adapter capable of WPA Enterprise security and support for Windows XP Zero Configuration (WZC) feature. Wi-Fi certification can be verified in the “PCs and Computing Devices - Adapter Cards” section at the Wi-Alliance’s Certified Products website: http://certifications.wi-fi.org/wbcs_certified_products.php?lang=en

Configuring Wireless Network Connection Properties
1. Be sure the wireless NIC is inserted and the most current drivers are installed on your computer. 2. If a vender-supplied utility was installed, configure it to allow windows to configure the adapter or for Windows Zero Configuration (WZC). 3. Double-click the My Computer icon, select Control Panel then Network Connections. 4. Right-click on Wireless Network Connection, and then click Properties to open the Wireless Network Connection Properties window.

5. Click on the Wireless Networks tab 6. In the Preferred networks: area, click Add…

7. In the Network name (SSID): field, type 4csuuseonly 8. Click to select the options: Network Authentication: WPA and Data Encryption: TKIP

9. Click on the Authentication tab. 10. Click to select EAP type: Protected EAP (PEAP). 11. Verify that both options Authenticate as computer when computer information is available and Authenticate as guest when user or computer information is unavailable are unchecked. 12. Click Properties to open the Protected EAP Properties window.

13. Click to select the option: Validate server certificate. 14. Click to select the option: Connect to these servers: and underneath it, type the following in the blank field acs-wow.csuohio.edu;acsbackup.csuohio.edu (no spaces)

15. Set Select Authentication Method: to Secured password (EAP-MSCHAP v2) 16. Click to select the option: Enable Fast Reconnect

17. Scroll down towards the bottom of the Trusted Root Certification Authorities: section and click the checkbox for the fourth to last “VeriSign Trust Network” certificate. 18. To verify that the correct certificate is selected, double-click it to open the Certificate window.

19. Click the Details tab 20. Verify that the Serial number begins with “7d d9 fe 07 cf a8 1e b7 10 79”. If not, the correct certificate must be selected the previous list. 21. Click OK to return to the Protected EAP Properties window.

22. Click Configure… to open the Secure password (EAP MSCHAPv2) Properties. 23. Uncheck the box: Automatically use my Windows logon name and password (and domain if any). Click OK.

24. Click OK three more times, to close all the network configuration windows. 25. Click on the balloon window above the icon tray that states “Click here to select a certificate or other credentials for connection to the network 4csuuseonly”

26. In the Enter Credentials window, Enter your CSU ID number in the User name: field. Enter your CampusPass in the password: field. You may leave the Logon domain: field empty. 27. Click OK.

You should now be connected to WoWnet.

To test your connection open your web browser and go to http://www.csuohio.edu

If you experience any problems while attempting to connect, please contact the Cleveland State PC Repair Shop at 216-802-3350.