Configuring Windows 7 to Use Encrypted (WPA-E) Wireless Services at UCSD

• Connect to the old "UCSD" wireless network, UCSD-GUEST, or a wired connection.
• Right-click here to download the UCSD root certificate.
• Click Save to Disk and then OK to complete installation.

• Double-click the UCSDCA-ROOT certificate file icon on your desktop (or default save directory) to install the certificate.
• When the Certificate window opens, click Install Certificate.
• Certificate Import Wizard will open. Click Next.
  
  

• Select Place all certificates in the following store.
• Click Browse.
  
  

• Select Trusted Root Certification Authorities.
• Click OK.
  
  

• Click Next to continue.
  
  

• Click Finish, OK, OK to complete installation. If asked whether you wish to install the certificate, click Yes.

• From the Start menu, open the Control Panel, double-click Network and Internet and then Network and Sharing Center.
• Select Manage Wireless Networks in the left menu.
• Click Add and select Manually create a network profile.
  • Enter UCSD-PROTECTED for the Network name.
  • Select WPA2-ENTERPRISE for the Security type. If WPA2-ENTERPRISE is not available on your computer, select WPA-ENTERPRISE.
  • Select AES for Encryption type. If AES is not available on your computer, select TKIP.
  • Leave the Security Key/Passphrase field blank.
  • If you want your computer to automatically select UCSD encrypted networking whenever it is available, check Start this connection automatically (recommended).
  • Check Connect even if the network is not broadcasting.
  • Click Next.
• When the Manually connect to a wireless network window opens, you've successfully added UCSD-PROTECTED.
  
  

• Select Change connection settings.
• Select the Security tab.
• Select Protected EAP (PEAP) for the Authentication method.
• To prevent having to re-enter your password in future, check Cache user information for subsequent connections to this network. 
  
  

• Click Settings to open the Protected EAP Properties window.
• Check Validate server certificate.
• Under the list of Trusted Root Certification Authorities, locate and check UC San Diego Certificate Service.
• Select Authentication Method should be set to Secured password (EAP-MSCHAP v2).
• Check Enable Fast Reconnect.
• Click Configure.
• Do not click OK without following the directions for Steps 10 and 11 below.

  

• Uncheck Automatically use my Windows logon name and password (and domain if any) and click OK.
  
  

• Click OK to return to the window seen in Step 8.
• Click Advanced settings.
• Make sure Specify authentication mode is checked under the 802.1X setting Tab.
• Under the drop-down menu, select User authentication.
• Click OK, then click OK again.
  
  

When you are within range of a wireless network access point, a message balloon will appear next to your clock asking you to provide additional information to authenticate to the network. Click inside the balloon and supply your Active Directory username and password (no domain is needed).

Note: If you see a Validate Server Certificate window, click OK.

• It may be necessary to turn your wireless off and back on again in order to detect UCSD-PROTECTED.
• If you continue to have problems, make sure you have installed all available patches for your wireless card (check the manufacturer's web site).