- Click the Start button, then click Connect to…
- Next choose Set up a connection or network in the bottom of the window.
- From the Choose a connection option menu select Manually connect to a wireless network.
- In the next screen select Wireless Network Connection from the drop-down menu, then click Next.
- For the network name enter BU (802.1x), for “Security type” select WPA2-Enterprise from the drop-down menu, and for “Encryption type” select AES from the menu. The text field for Security Key/Passphrase should be grayed out. Make sure the Connect even if the network is not broadcasting check box is not checked. Then click Next.
- In the next screen, select Change connection settings.
- In the new window that opens, click on the Security tab at the top of the window.
- Under the Security tab, make sure the Cache user information for subsequent connections to this network option is not selected. Protected EAP (PEAP) should be the default option selected under Choose a network authentication method. Confirm this, then click the Settings button.
- In the Protected EAP Properties window, uncheck the Validate server certificate option.
Then under the Select Authentication Method heading, make sure Secure Password (EAP-MSCHAP v2) is selected from the drop-down menu. Make sure you do not select “Enable Fast Reconnect, Enable Quarantine checks,” or “Disconnect if server does not present cryptobinding TLV.” If any of these are selected, click to unselect.
- Next click on Configure and in the window that opens unselect the Automatically use my Windows logon name and password (and domain if any) box.
- Click OK out of all the Properties windows. You are now ready to connect to the network.
- Under the Start menu, choose Connect To.
- In the window that appears, click on BU (802.1x) and click Connect.
- If you are prompted, click “Enter/select additional log on information.” The prompt may appear as a window, or as a bubble in the system tray.
- If you are entering additional information, sign in with your BU login name (your BU email address without the @bu.edu) and Kerberos password, and the Logon domain BU.EDU.
- You may be prompted to accept a certificate with a window like the one below. Click OK.
- You should now be successfully connected to the BU wireless network and able to access the Internet.
If you can’t log in: If you’re repeatedly prompted for your name and password and are still unable to successfully connect to the BU (802.1x) SSID, you may need to synchronize Kerberos. While connected via Ethernet or BU (requires VPN), simply go to the Kerberos synchronization page (pictured below) and click the “log in” button. Make 802.1x the default SSID for BU: If you had previously used either “123” or “BU (requires VPN)” or “BU Wireless Help” your computer may try to connect to that network first. In order to be sure your computer connects first to the BU (802.1x) SSID, follow these steps:
- Open the Start menu and choose Control Panel.
- In the Control Panel window, choose View network status and tasks which is under the Network and Internet heading.
- On the left side of the Network and Sharing Center window, choose Manage wireless networks.
- To rearrange the priority of your networks, click first on the BU (802.1x) SSID, and then on the Move up button until it is at the top of the list. You can now close these windows and your settings will be saved.
You should now be fully connected to the campus network using the BU (802.1x) SSID and able to browse to websites both on and off campus.