Overview
This article explains how to connect to the SFUNET-SECURE and eduroam networks on your mobile devices. Students, faculty and staff should use SFUNET-SECURE, the secure wireless network on campus. You also have access to wireless services at cooperating institutions in Canada, US, Asia and Europe using eduroam.
Guests to SFU campus who don't have an SFU computing ID can create a temporary account and connect to SFUNET-GUEST.
Details
Phones and Tablets
iphone/ipad
- Open Settings on your device.
- Select Wi-Fi.
- Select SFUNET-SECURE or eduroam.
- Enter your computingID@sfu.ca and your SFU password. Then tap Join.
- Trust the SFU certificate by tapping Trust.
Android Devices
Device settings will vary from manufacturer to manufacturer:
- Open Wi-Fi Settings.
- Select SFUNET-SECURE or eduroam.
- Enter the following information based on the settings you're prompted for:
Wi-Fi Configuration Settings
Authentication Protocol |
Choose |
EAP method |
PEAP |
Phase 2 Authentication |
MSCHAPv2 |
CA certificate |
SFUNET-SECURE_WPA |
Online Certificate Status |
Request Status |
Domain |
secure.sfu.ca |
Anonymous Identity |
Leave blank |
Identity |
computingID@sfu.ca |
Password |
SFU password |
Desktop and Laptop Computers
mac
- Open System Settings.
- Open Network Settings.
- Select SFUNET-SECURE or eduroam.
- Enter your computingID@sfu.ca in the Username field.
- Enter your SFU password in the Password box.
- Check the box to Remember this network.
- Click Join.
- Click Connect.
- If asked to trust a certificate, tick the box to always trust the certificate.
WINDOWS
- On the bottom task bar, click on the Wireless icon.
- Select SFUNET-SECURE or eduroam from the list of networks.
- Ensure the Connect automatically box is checked.
- Click the Connect button.
- When prompted, enter your SFU computingID@sfu.ca and SFU password and click OK.
- You may be prompted to verify the servers identity. If so, click Connect. Windows will restart the authentication setup if Connect is not clicked quickly. If so, repeat 5 again.
- You should now be connected to SFUNET-SECURE or eduroam.
You should now automatically connect to SFUNET-SECURE or eduroam networks across all SFU campuses.
If you still can't connect, try the advanced method to connect:
Advanced Method
In some cases, it has been found the default method Windows 10/11uses to configure WPA2-Enterprise networks does not work consistently. If you are having trouble connecting or staying connected to SFUNET-SECURE or eduroam, try the following procedure to set your connection up using this advanced method.
Deleting existing Wi-Fi profiles
- Open the search dialogue (move mouse to top-right of screen, select Search).
- Enter the term Command Prompt.
- Click on the Command Prompt icon until a black window appears
- Type the following on command line (replace SFUNET-SECURE with eduroam connections as appropriate): netsh wlan delete profile name="SFUNET-SECURE"
Setting up the connection manually
- Open your control panel, or right click on the wireless icon in your task bar. Choose Open Network and Sharing Center
- Select Set up a new connection or network.
- Select Manually connect to a wireless network.
- Enter SFUNET-SECURE as the network name.
- Choose WPA2-Enterprise as the security type.
- Ensure Start this connection automatically is selected
- Click Next. You should be presented with a request to Change connection settings. Select this option.
Configuring the security settings for the connection
- Click the Security Tab.
- Change the network authentication method to Microsoft: EAP-TTLS.
- Ensure that Remember my credentials for this connection each time I'm logged on is selected.
- Click the Advanced Settings button.
- Check the Specify authentication mode and choose User authentication.
- Click Save credentials and enter your computing ID and password.
- Click OK and close all open configuration dialogues.
- Connect to the SFUNET-SECURE or eduroam network you just configured. You will likely be prompted to trust a certificate before proceeding. Click Connect.
You should now automatically connect to SFUNET-SECURE or eduroam networks across all SFU campuses.
LINUX
Note: This guide is to serve as a best-effort attempt to provide the required configuration steps to connect to the SFUNET-SECURE or eduroam networks using a vanilla install of Ubuntu. Because of the various levels of hardware, software and driver support of Linux-based devices, your mileage may vary.
- Open the System menu.
- Select Preferences.
- Select Network Connections from the menu.
- Click on the Wireless tab.
- Select the Wireless Networks tab.
- Ensure that SFUNET-SECURE or eduroam is not already in the Networks list. If so, remove it.
- Click the Add button.
- Enter the following configuration details (settings are case-sensitive!):
Connection Name |
"SFUNET-SECURE" or "eduroam" |
SSID |
"SFUNET-SECURE" or "eduroam" |
Mode |
"Client" or "Infrastructure" |
BSSID |
Leave blank |
MAC Address |
Leave blank |
MTU |
Automatic |
- Click the Wireless Security tab.
- Enter the following configuration details (settings are case-sensitive):
Security |
WPA & WPA2 Enterprise |
Authentication |
Tunneled TLS |
Anonymous Identity |
Your computingID@sfu.ca |
CA Certificate |
Leave blank |
Inner Authentication |
PAP |
Username |
Your computingID@sfu.ca |
Password |
Your password |
- If you are prompted to use a CA Certificate, you can do so by downloading the Thawte Premium Server CA certificate (you will have to do this before you connect to wireless). You may also choose to proceed without checking the certificate.
You should now be connected to the SFUNET-SECURE or eduroam networks across all SFU campuses.
Other Devices and Operating Systems
Other Devices
For any device that is capable of secure wireless and WiFi 5 (WPA2-Enterprise), here are the basic requirements to connect:
Wireless Configuration Settings
Information required |
Enter or Select |
Network SSID |
SFUNET-SECURE or eduroam |
Authentication Method |
WPA2 (sometimes called WPA2-Enterprise) |
Data Encryption Method |
AES |
EAP Type |
PEAP or EAP-TTLS |
Authentication Protocol |
MS-CHAPv2 for PEAP, PAP for EAP-TTLS |
Username |
computingID@sfu.ca |
use SFUNET with Older devices
If you have an older device and you're having trouble connecting to SFUNET-SECURE or eduroam networks, you can try to connect to SFUNET instead. SFUNET is an older, insecure wireless network meant for basic connectivity. Currently, there are no traffic restrictions and all wireless devices should be supported.
To connect to SFUNET:
- Open your device's Wi-Fi settings and select SFUNET . The captive Wi-Fi portal should appear.
- Enter your SFU computing ID and password into the web portal. Then select Log In.
Guest Access
If you don't have an SFU computing ID, you can still connect to a wireless network by using the SFUNET-GUEST network.
Create an account and connect to SFUNET-GUEST
- Open your device's Wi-Fi's settings.
- Connect to SFU-Guest. A captive portal will appear with the next steps to proceed.
- After reading the terms and conditions, tap on Agree and Continue.
- Tap on Create a Temporary Account.
- Enter your name, email address, and phone number. Then tap on Create Account.
- On the login page, enter the corresponding email address and password received via SMS.
Troubleshooting connection issues
If you're having difficulty connecting to the Wi-Fi, you can try the following:
- Verify your username and password. You should be able to sign goSFU or SFU Mail with the same credentials
- Remove the Wi-Fi profile or forget network settings
- Restart your device
- Ensure the latest wireless drivers are installed (macOS includes drivers as part of the operating system updates). Drivers make a significant difference to the performance of your wireless connection. You can find the newest available driver for your wireless device from the vendor's website.
- Disable any power saving features on the wireless card.
- Use devices that support at minimum WiFi 5 (802.11ac) on the 5ghz band. Use the Wi-Fi Certified Product Finder to determine if your device supports WiFi 5.
- Turn off "Private Wi-Fi Address" or "Limit IP Address Tracking" features (iOS)
Get help from IT Services
If you're still having difficulty connecting to Wi-Fi, please visit one of our IT Service Centres for assistance:
- Burnaby: P9300 or WMC 2262
- Surrey: SRY-C 353
- Vancouver: HC1300
If you have any other questions about Wi-Fi, please submit a ticket:
Submit a ticket