The BYU Office of Information Technology provides wireless internet (WiFi) access to the BYU community across campus. Users with wireless-enabled computers or other devices may access the internet using this wireless service.
Table of Contents
- Available Networks
- Connecting to Eduroam
- Connecting to BYU-WiFi
Available Networks
There are currently two main wireless networks available across campus depending on your location:
Eduroam
The Office of Information Technology encourages students, faculty and staff to use the Eduroam network wherever it's available. Eduroam provides the highest possible level of wireless network encryption and gives users the ability to use the eduroam networks at other participating universities. Eduroam may be used by any current faculty, staff member, or student. To search for participating schools, go to https:cat.eduroam.org/.
Users can connect/reconnect by:
- Going into wifi settings on your device, select Eduroam. Using your "netid@byu.edu" as the username and your BYU password for the password.
BYU-WiFi
BYU-WiFi is intended for guests and devices that are unable to connect to eduroam. Guest users will only have access to public-facing BYU websites through the internet. Devices that do not have web browsers should use BYU-WiFi. These include (but are not limited to) Apple TVs, Chromecasts, and WiFi printers, which can join the network with no additional registration or configuration needed. Even though they are connected to BYU-WiFi, these devices are accessible to computers connected to Eduroam.
Connecting to Eduroam
See instructions below for your device.
Eduroam Features
- High-speed connection to the Internet
- Data is encrypted using WPA3 with Transition mode (allows WPA2)
- Username and password required
- Provides Internet access to BYU and non-BYU websites
- Access to other network resources such as printers, network drives, etc.
Manual Setup Instructions
- Select the "eduroam" network on your device
- It will prompt you for a username, which MUST be formatted as <netID>@byu.edu. ex: oitbyu@byu.edu
- Enter your password, which should be your regular BYU password that you use to sign into all BYU websites
- Accept the security certificate.
Note: for device specific instructions, see sections below.
Wireless Protocols
The wireless 802.11ax standard is recommended, 802.11ac, 802.11n and 802.11g are supported.
802.11b (found on very old devices such as older gaming consoles and portable devices) is not supported.
Most computers, cell phones and tablets should work with eduroam without issue.
Please note that smart devices are generally unable to connect to the Eduroam network. Devices such as wireless printers, Chromecasts, smart TVs, AppleTVs, Amazon Echos or other similar products should connect to the BYU-WiFi network. Services offered by devices connected to BYU-WiFi (such as Airplay on Apple TV) are still accessible to users on the eduroam network.
Connecting to Eduroam for iPhone/iPad
The following are detailed instructions for manually connecting to and troubleshooting connecting to Eduroam from an iPhone or iPad. For general information, see Connecting to the Eduroam network.
Manually Connecting
- Open the "Settings" app.
- Under "Wi-Fi" select the network called "eduroam".
- Your device will prompt you for your username and password.
- The username needs to be formatted as <netid>@byu.edu.
- Your password will be your BYU password, the same one you use for all BYU websites.
- When you get prompted about a security certificate tap the text that says "Trust" at the top of the screen. Installation of this certificate is required for Eduroam to function.
- At this point you should be connected to Eduroam and should be able to use the internet.
- If you are still having problems after following the above steps, see the Troubleshooting section at the bottom of this page.
Note: There has been an issue recently that only applies to iPhones not being able to connect to Eduroam or BYU WiFi. This issue is caused by a bug in the code of IOS 14.0 and/or 14.1. The device needs to be updated to IOS 14.2 to correct the issue. Once updated, the iPhone will connect to Eduroam. If the issue persists after updating the IOS, please contact the TSC at 801-422-4000 for assistance.
Note: Some users have been unable to connect to Eduroam while their iPhone's language is not English. Switching the language to English, connecting to Eduroam, and then switching back to the user's preferred language may resolve the problem.
Troubleshooting Option
- Open Settings
- Select General
- Scroll to the bottom and select Transfer or Reset iPhone
- Select Reset
- Select Reset Network Settings
- Enter your passcode if you have one
- If asked, enter your Screen Time passcode as well
- Tap Reset Network Settings again to confirm your decision
Connecting to Eduroam for Windows
NOTE: If neither "eduroam" nor BYU-WiFi show up in their list of available networks in some buildings, they will need to update their wifi adapter before proceeding. Many buildings on campus have been upgraded to wifi-6. This newer protocol requires newer drivers to be able to even see the wif-fi-6 SSIDs.
The following is detailed instructions for manually connecting to Eduroam from a Windows based system.
- Click on the wireless icon in your system tray in the lower right corner of your desktop
- Users of older versions of Windows can choose Start > Connect To: > Show all connections
- Users of older versions of Windows can choose Start > Connect To: > Show all connections
- Select the desired network, eduroam. Your computer will prompt you for a username and password.
- Username needs to be formatted as <netid>@byu.edu."
(Windows 10) (Windows 8.1) - Your password will be your BYU password, the same one you use for all BYU websites.
- Click "Connect" on the dialogue box that asks if you want to continue connecting.
- At this point, you should be connected to Eduroam and should be able to use it without issue.
- If you are still having problems after following the above steps, see the Troubleshooting section at the bottom of this page.
Connecting to Eduroam for Android/Chromebook/Google Pixel
The following is detailed instructions for manually connecting to Eduroam for Android based system or Chromebooks.
Android users should use the following setup.
- EAP Method: Protected EAP or PEAP
- Phase 2 Authentication: choose MSCHAPv2
- Server CA certificate: Select "Do not validate" or "Do not check" from drop-down menu. If using a Google Pixel or Motorola phone, select "Use system certificates"
- Domain Suffix Match: Leave blank (if you selected "Use System Certificates", the domain is byu.edu)
- Username/Identity: <netid>@byu.edu
- Password: <Your own password>
- Anonymous identity: Leave blank
- All other fields: Leave blank
It has been found that the above setup may not always work for all Chromebooks or Androids. If this is the case, try this setup, as well.
- EAP Method: Protected EAP or PEAP
- Phase 2 Authentication: Automatic
- Server CA certificate: Default
- Domain Suffix Match: byu.edu
- Username/Identity: <netid>@byu.edu
- Password: <Your own password>
- Anonymous identity: Leave blank
- All other fields: leave blank
For some Google Pixel owners, they will not be able to connect until they set their Server CA Certificates to trust on first connection.
If the previous configurations are failing, try this one. This is a solution to issues related to the anonymous identity field. If the user's anonymous identity can't be left blank, and persists as "anonymous" throughout the setup, try this configuration. This has been found to be an issue on newer Google Pixel devices.
- EAP Method: Protected EAP or PEAP
- Phase 2 Authentication: MSCHAPv2
- Server CA certificate: Trust on first use
- Username/Identity: <netid>@byu.edu
- Anonymous identity: anonymous@byu.edu
- All other fields: Leave blank
Please Note that the SSID is "eduroam".
________________________________________________________________________________________________________________________________________________
Connecting to Eduroam for Mac
The following is detailed instructions for manually connecting to Eduroam from Mac systems.
For manual connection
- Make sure that MAC hardware is LATE 2013 or newer on your computer. (If not, they well have to use BYU-WiFi instead of eduroam).
- Click on the wireless icon in the upper right corner of your desktop.
- Select the desired network eduroam. Your computer will prompt you for a username and password.
- Username needs to be formatted as (netid@byu.edu).
- Your password will be your BYU password, the same one you use for all BYU websites.
- Click "Join" to join the network.
- Click "Continue" when prompted to accept the security certificate.
- A computer administrator name and password will be required to install the certificate - this is a username and password on the computer, not one that is provided by or associated with BYU. It will be the same username and password that you normally use to install software on the device.
- If you are still having problems after following the above steps, see the Troubleshooting section at the bottom of this page.
Forgetting Networks
These steps only work for MacOS 13 and beyond. Instructions are similar for older versions, but the names of tabs are a little different.
- Open the "System settings..."
- On the left side, select "Privacy & Security" and select "eduroam" on the right side under "Profiles". You can now delete the profile by clicking the minus button.
Note: If there is no Profile button, there is no old Eduroam profile stored, you can proceed to step 4.
- Step 3: Delete eduroam profile. Please confirm the deletion of the profile by clicking "Remove".
- Click the "Wi-Fi icon" at the top of the title bar and select "Wi-Fi settings".
- Click on "Advanced" in the window.
- In the list of known networks, select "eduroam" if available, click on the circle with 3 dots and select "Remove From List".
- You should now be good to set up eduroam again.
For some older versions of Mac OSX (MacOS 12 and earlier), these steps might not appear. You can also try these steps:
- From any Finder window, hit Command+Shift+G to bring up the "Go To Folder" field. Then enter the following path:
- Delete the com.apple.network.eapolclient.configuration.plist file which will prompt for local admin credentials. Then restart the laptop or iMac and connect to eduroam.
Clear Cached Network Data
It seems that sometimes the Mac will still keep some information about the Eduroam network within it's configuration files. Deleting the config file by:
- Open Finder and click on "Go" at the top of the screen next to window "View" and "Window".
- Click on "Go to Folder" near the bottom of the dropdown menu.
- Type/paste in: /Library/Preferences/SystemConfiguration
- Delete com.apple.network.eapolclient.configuration.plist
- Restart the computer.
- Try connecting to Eduroam again.
Connecting to eduroam for Linux
- Click the NetworkManager applet (a pair of superimposed monitors, typically in the upper bar on the right), and then select the network name (eduroam). The "Wireless Network Secrets Required" window will appear.
- Configure the settings as follows:
- Next to "Wireless Security:", select WPA & WPA2 Enterprise.
- Next to "Authentication:", select Protected EAP (PEAP).
- Leave the "Anonymous Identity:" field blank.
- Click the button next to "CA Certificate:", and then browse to the certificate bundle file (/etc/pki/tls/certs/ca-bundle.crt).
- For Ubuntu/Debian Linux systems connecting to Eduroam, the certificate might also be found at /etc/ssl/certs/ca-certificates.crt
- For Ubuntu/Debian Linux systems connecting to Eduroam, the certificate might also be found at /etc/ssl/certs/ca-certificates.crt
- Next to "PEAP Version:", choose Version 0.
- Make sure "Inner Authentication:" is set to MSCHAPv2.
- Next to "User Name:" enter your NetID@byu.edu. Next to "Password:", enter the password you use to access my.byu.edu.
- Do NOT check Show password, as it will display your passphrase in clear text.
- Next to "Wireless Security:", select WPA & WPA2 Enterprise.
Most computers, cell phones and tablets should work with eduroam without issue. Devices without web browsers should use the BYU-WiFi network. Services offered by devices connected to BYU-WiFi (such as Airplay on Apple TV) are accessible to users on the eduroam network.
Wireless Protocols
The wireless 802.11ax standard is recommended, 802.11ac, 802.11n and 802.11g are supported. 802.11b (typically only found on very old devices such as older gaming consoles and portable devices) is not supported.
Manual Setup Instructions
- Select the "eduroam" network on your device.
- When prompted enter netid@byu.edu for the username.
- Accept the security certificate.
- Note: smart devices are generally unable to connect to the Eduroam network. Devices such as wireless printers, Chromecasts, smart TVs, AppleTVs, Amazon Echos or other similar products should connect to the BYU-WiFi network.
Detailed Instructions
Wi-Fi security: WPA & WPA3 with Transition mode
Authentication: Protected EAP (PEAP)
Anonymous identity: (leave blank)
CA certificate: ca-certificates.crt (found at /etc/ssl/certs/ca-certificates.crt)
PEAP version: Automatic
Inner authentication: MSCHAPv2
Username: netid@byu.edu
Password: ************
For a graphical walkthrough, follow the Ubuntu setup instructions here, using the information provided above.
Connecting to BYU-WiFi
BYU-WiFi Features
- Open generic internet access to the Internet.
- BYU WiFi is not encrypted, for increased wireless security use the Eduroam network.
- BYU-WiFi features a guest/visitor login which grants internet only access.
- BYU-WiFi also allows users to sign-in and authenticated users gain access to internal resources in addition to the generic internet access.
- Automatically allows certain "headless" devices (no web browser) access to the campus internal network. Examples include Roku, AppleTV, Amazon Echo, and wireless printers. It does not allow Chromecast devices.
- Services offered by headless devices (such as Airplay on Apple TV or printing) are accessible to authenticated users on the BYU-WiFi and eduroam networks.
Connecting to BYU WIFI
To manually access the list of available networks if not automatically connected:
Note: Many modern devices will automatically pop up a web page for sign in once connected to the network. These instructions are included in case this doesn't happen.
Connecting to BYU WIFI For Windows
- Click on the wireless icon in your system tray in the lower right corner of your desktop if available.
- Users of older versions of Windows can choose Start > Connect To > Show all connections
- Users of older versions of Windows can choose Start > Connect To > Show all connections
- Select the BYU-WiFi network.
- Open a browser such as Google Chrome and navigate to google.com or another website, where you will be prompted to log in useing your BYU NetID and password.
- You may see a security error if attempting to go to a secure site. This is normal behavior and you may proceed. One way to avoid this error is to attempt to access a non-secure website or a website you've never been to.
- You may see a security error if attempting to go to a secure site. This is normal behavior and you may proceed. One way to avoid this error is to attempt to access a non-secure website or a website you've never been to.
- To gain access to internal campus resources you must login with your netid and password. If you are not a current student, faculty, or staff you can click the link at the bottom of that screen for 1 day of guest access.
Connecting to BYU WIFI For Mac
- Click on the wireless icon in the upper right corner of your desktop and click on the BYU-WiFi network.
- Open a browser such as Google Chrome and navigate to Google or another website. You will be prompted to log in using your BYU NetID and password.
- If you don't want to login you can sign on as a campus guest for 1 day of internet access.
Connecting to BYU WIFI For Mobile Devices (Android and iOS)
- Go to settings and the click on the Wi-Fi settings, then select the BYU-WiFi network.
- Open up an internet browser (usually Safari on iOS devices and Chrome on Android devices) and navigate to Google or another website. You will be prompted to log in using your BYU NetID and password.
- If you don't want to login you can click the link at the bottom of the login box (below the login button) for 1 day of guest access.
Note: Some Samsung devices will pop up a message that says "Allow CaptivePortalLogin to access photos, media, and files on your device?" You can select "Deny" for this message. This is particular to Samsung devices and is not something that our sign-on system is asking for.
Authenticated Access
Users who log in with a NetID and password and have an active role with the university will have access to the internal campus network as well as internet access. This does NOT include data center access. This would allow a user to be able to perform activities such as printing to network printers and accessing internal network drives.
Guest Access
Users may click a link below the login box allowing for instant guest access. This provides access to the internet but no access to internal campus resources. Campus websites that are accessible via any public internet connection will still be accessible.
Note: There has been an issue recently that only applies to iPhones not being able to connect to Eduroam or BYU WiFi. This issue is caused by a bug in the code of IOS 14.0 and/or 14.1. The device needs to be updated to IOS 14.2 to correct the issue. Once updated, the iPhone will connect to WiFi. If the issue persists after updating the IOS, please contact the TSC at 801-422-4000 for assistance.