Configure your wireless network on Windows XP

Let Windows XP support WPA2

Wi-Fi Protected Access 2 or WPA2 implements the required security properties of the IEEE 802.11i standard. These were not yet implemented in the first version of WPA. The new WPA2 also supports the Advanced Encryption Standard (AES), this is the encryption standard of the American government and was co-developed at KU Leuven.

Microsoft has an update for its Wireless Client available on http://support.microsoft.com/?kbid=917021.

More information on WPA and WPA2 can be found here: http://en.wikipedia.org/wiki/Wi-Fi_Protected_Access

Configuring eduroam on Windows XP for KU Leuven users

In this document we explain how to connect to eduroam on Windows XP.

Let Windows manage your wireless networks

We will assume your wireless network is managed by Windows. In case this is not the case yet, right-click the wireless network icon as displayed below. Next, click “Use Windows to manage Wi-Fi”.

Configuration for the eduroam network

Right-click the icon as displayed below. Next, click on “View Available Wireless Networks”. A menu with the available wireless networks will appear.

Do note, your wireless networkcard needs to be properly installed and activated.

Select the network with SSID “eduroam”.
Next, click “Change advanced settings”.

Click the tab “Wireless Networks” as displayed below. We will add the eduroam network to your list of preffered networks. Click “Add”.

On the tab “Association”, fill in the following:

• SSID: eduroam
• Network Authentication: WPA or preferrably WPA2
• Data encryption: TKIP for WPA or AES for WPA2

If you get the notification that eduroam already exists, this has been configured before. if you wish to edit this, follow the instructions on this separate page.

On the tab “Authentication”, fill in the following:

• EAP type: Protected EAP (PEAP)
• Uncheck “Authenticate as computer when computer information is available”

Next, click “Properties” to change the properties for PEAP.

Your username and password need to be checked by our RADIUS server. Fill in the following:

• Server: radius.kuleuven.be
• Trusted Root Certification Authorities: GTE CyberTrust Global Root, UTN-USERFirst-Hardware or AddTrust External CA Root

  UPDATED

• Check “Do not prompt user to authorize new servers or trusted certification authorities”
• Authentication method: Secured password (EAP-MSCHAP v2)

Now we got to make sure Windows logon wont authenticate with the wrong credentials to the RADIUS server.
Click on the  “Configure…” button, next to “Authentication Method”.

Make sure the checkbox isn’t checked as seen below.

Press “OK” twice and after this click the tab : “Connection”.

Choose to automatically connect to the network eduroam when available, proceed by clickingthe  “OK” button.

Windows will now try to connect to the eduroam network.

Aftera while windows will prompt you for your username and password. There will be a notification popup at the bottom right of the screen. Click this message.

Staff need to login with their u-number@kuleuven.be, eg. [email protected].
Students need to login with their intranet userid (s- or m-number) followed by @kuleuven.be, eg. [email protected]

Leave the field  “Logon domain” empty.

If all went went, you will see a small network icon in the bottom right of your taskbar.You are now connected to the eduroam network.

Remove your your password from the Windows registry

Windows XP will automatically use your username and password from the PEAP authentication in the registry.
Windows Vista will offter the possibility to not store this information.
If you are not using your own computer, or you leave it behind unattended, someone can lookup your password.

You can download a zip file, that contains a registry file, which will remove the stored password from the registry : download.
Or you can do it manually by following these steps.

• Click Start -> Run.
• Type regedit and click OK
• Navigate to the following path: HKEY_CURRENT_USER\Software\Microsoft\Eapol\UserEapInfo
• In the menu Edit Click Delete
• They will ask for a confirmation, click Yes.

More information can be found at : http://support.microsoft.com/kb/823731