OSU Secure

What is OSU Secure?

OSU_Secure is an option for those on campus who require data encryption while accessing the internet. It uses a 48-bit initialization vector and a 128-bit encryption key and utilizes Temporary Key Integrity Protocol (TKIP) to achieve security. This is a useful option for those who enjoy the leisure of online banking, but don't want to be concerned with unencrypted information being transmitted through the wireless network.

Why WPA?

WPA offers a more secure method of using OSU's wireless network. OSU_Secure SSID is the preferred method to securely access the OSU Network and the Internet. Wireless clients using the OSU_Access network will be limited to what they can access. You can use the VPN service on the OSU_Access network to have similar to secure access capabilities that OSU_Secure provides.

What is WPA?

WPA or Wi-Fi Protected Access is a class of systems to secure wireless computer networks. There are two classes of WPA that allow secure access to a wireless network:

• WPA-PSK
• WPA-Enterprise

WPA-PSK works well in a SOHO environment where a strong (minimum 20+ characters) Pre-Shared Key can be shared amongst a few wireless clients. WPA-Enterprise is more suitable for large organizations using an external authentication method. Both classes of WPA require encrypted authentication to occur prior to allowing encrypted data to be sent over the wireless.

The following URL has a comprehensive description of WPA and other references to implementations of WPA: Wikipedia's Wi-Fi Protected Access.

Who has access?

As with OSU_Access, anyone with valid ONID credentials may access OSU_Secure. For those who have forgotten their ONID login information, it can be reset using that individuals OSU ID^? number and GAP^? from the ONID homepage or by clicking here.

How can I use it?

To connect to OSU_Secure, the computer must first be registered to Maintain (link opens in new window). Maintain is a network management software that registers users onto the wireless network on campus. It requires the hardware address, which is unique to each device, to be registered to the network. Generally, these will look like, "00-23-45-67-89-ab." If you have troubles finding your hardware address, please use these instructions. (Note: the instructions will open in a new window.)

Once a computer is registered in Maintain (link opens in new window), that device can either connect to OSU_Access or OSU_Secure. Once registered, OSU_Access does not require any more configuration while OSU_Secure requires additional configuration for the WPA encryption.

The general settings used for the OSU_Secure network are:

• SSID: OSU_Secure
• Security: WPA2 Enterprise
• EAP Method: PEAP (PEAPv0/EAP-MSCHAPv2)
• Key Type: AES (or automatic)
• Phase2 Type: MSCHAPv2
• Username: ONID Username
• Password: ONID Password

More detailed instructions with pictures are available for both Microsoft and Apple operating systems as well as select mobile devices. Click on any of the links below to view the instructions:

Windows 7/Vista

Windows XP

Mac OS 10.6 / 10.7

Mac OS 10.5

Linux (Unix)

Mobile

What does the "Secure" part of OSU secure mean?

The secure part means that any data you send over the wireless connection is encrypted. Browsers and websites can encrypt the data that they send anyway which happens on most or all sites that transfer any sensitive information. The encryption done by the wireless network is another layer of security that helps protect your sensitive information. The following is more technical information which is unnecessary for the use of the wireless networks.

Examples:

Un-Secured Wireless (OSU_Access):

Sending this data through an HTTP connection will be transmitted over the wireless network completely unencrypted. If you are submitting a comment to an unsecured forum the data would be transmitted in clear text which could be read by anybody with the correct software. For poorly designed websites they may also be able to see the username, password, and what website you were trying to log in to.

Sending this through a https (s stands for secure) connection will be encrypted on your computer and sent through the network. Anybody with the correct software would be able to see where you were sending the information to but not the actual information being sent. (more technically the header information will not be encrypted but the data will be).

Secured Wireless (OSU_Secure):

Sending this data through a HTTP connection will still result in everything being encrypted. Anybody with the correct software will be able to see that you are sending and receiving data but they will not be able to tell where you are sending it or what information you are sending (including usernames and passwords).

Sending this through a https (s stands for secure) connection will be encrypted on your computer and sent through the network where it will be encrypted again (more technically the data will be encrypted twice and the headers will be encrypted once). Anybody with the correct software would be able to see that you are sending and receiving data but they will not be able to see where you are sending it or what information you are sending (including usernames and passwords).

OSU Access

What is OSU Access?

OSU_Access is the unsecured campus wireless network. Anybody with an ONID account or a Conference Login can connect.

How do I connect?

You can connect to OSU Access using your laptop's wireless connection. If it is set to automatically connect, it may ask you if you really want to connect to it. You may also have to select it from the list of wireless networks, and it may ask you if you really want to connect here as well. In either case select Ok, or Connect.

When you open your browser, you should get a sign-in/registration page. You can choose to either sign in, which is just a temporary 600 minute login, or you can register your computer's MAC address^? so that you don't have to sign in again. We strongly recommend that customers permanently register their machines.

For instructions on how to permanently register your machine, Click Here.

Visitor Wireless

The Visitor network is free.  Aside from using the University’s existing wireless infrastructure, no OSU staff or resources are involved; routing and management are provided by Peak and Alyrica.

• A login/agreement appears every 20 minutes.
• Capacity of this network is limited.
• OSU does not provide support for this free service.
• OSU does not guarantee that this free service will work for everyone; nor do Peak or Alyrica.  
• This is NOT intended as a replacement for OSU Access or OSU Secure. It’s strictly a free service provided as a temporary convenience for visitors to OSU.
• This network will not be appropriate for anyone authorized to use our existing OSU networks.

Using Wireless at U of O

Members of the Oregon State University Community are able to use wireless networking at Portland State University and the University of Oregon as part of an agreement among these institutions.  Please carefully follow the instructions below to use your ONID account to get on U of O wireless.

Step 1: Connect to the right wireless network. 

You should choose the wireless network named "uowireless" (Not the one labeled "UO Secure").  See illustration below.  Your network list may look somewhat different.

 

Step 2: How to use your ONID password

Once you have connected to the correct network you will need to authenticate (i.e. log in).  To do that, open any web browser and go to www.oregonstate.edu (any other site will do as well).  A login screen will then present itself:

Here you will login with your ONID credentials: for the  user name use your ONID email address. 

Example: username@onid.oregonstate.edu

If you have typed in your credentials correctly you will now how access to the internet through the U of O wireless network.

Step 3: Initiate a VPN^? connection to OSU.  (Optional but recommended)

While this step is not strictly mandatory, it is highly recommended as it will offer two major advantages. First, it will make sure your Internet activity is safe from eavesdropping.  As is the case with many wireless networks, the UO network is not encrypted, so anyone within broadcast range of your computer may be able to see much of what you do on the Internet.  The VPN eliminates this problem.  Second, using the VPN will give you broader access to OSU resources than you would otherwise have.  Click here for more information on the OSU VPN.

Using Wireless at Portland State University

Members of the Oregon State University Community are able to use wireless networking at Portland State University and the University of Oregon as part of an agreement among these institutions.  Please carefully follow the instructions below to use your ONID account to get on PSU wireless.

Step 1: Connect to the right wireless network. 

You should choose the wireless network named "PSU" (Not the one labeled "PSU Secure").  See illustration below.  Your network list may look somewhat different.

 

Step 2: How to use your ONID password

Once you have connected to the correct network you will need to authenticate (i.e. log in).  To do that, open any web browser and go to www.oregonstate.edu (any other site will do as well).  A login screen will then present itself:

Here you will login with your ONID credentials, but in a slightly different way: for the  user name, use your ONID username and append "@onid"  Be very careful not to append any more than just "@onid"   If you also append "oregonstate.edu" the process will fail.

Example: username@onid

If you have typed in your credentials correctly you will now how access to the internet through the PSU wireless network.

Step 3: Initiate a VPN^? connection to OSU.  (Optional but recommended)

While this step is not strictly mandatory, it is highly recommended as it will offer two major advantages. First, it will make sure your Internet activity is safe from eavesdropping.  As is the case with many wireless networks, the PSU network is not encrypted, so anyone within broadcast range of your computer may be able to see much of what you do on the Internet.  The VPN eliminates this problem.  Second, using the VPN will give you broader access to OSU resources than you would otherwise have.  Click here for more information on the OSU VPN.

Wireless Printing For Mac

Setup Wireless Printing - OSX 10.7

Currently, OSX 10.7 doesn't support wireless printing (due to SAMBA protocol limitations). We are working with Apple, and Student Computing Facilities, to resolve the issue.

Setup Wireless Printing - OSX 10.5 and OSX 10.6

To setup wireless printing in OSX 10.5 and OSX 10.6:

1. Figure out which printer you want to print to. Click here for a list of available printers.
2. From the Apple menu, select System Preferences
3. Select "Print & Fax"
4. Click the + sign to add a printer
5. Ctrl+click on the top of the window and select customize toolbar
6. Drag the advanced icon to the toolbar
7. Click Done
8. Click the advanced icon
9. In the Type dropdown, select "Windows"
10. In the Device dropdown, select "Another Device"
11. In the URL field, enter:
    smb://username:password@onid/onid-print.scf.oregonstate.edu/printername
    (where "username" is your username and "password" is your ONID "Samba/Windows" password and where "printername" is the printer you are connecting to. Example: smb://jsmith:Ss12$RMY9@onid/onid-print.scf.oregonstate.edu/scf_main
    (your password will not be visible after it's entered here)
12. In the Name dropdown, enter a name to identify the printer
13. Leave the Location field blank 
14. In the Print Using dropdown, underneath Choose a driver or printer model, choose "Select Printer Software"
15. Select the Printer Model from the list. If you cannot find it, then cancel out of the model list and select a "Generic" option from the Print Using dropdown.
16. Click "Add"
17. Click "Continue"
18. Print to the newly created printer.

Setup Wireless Printing (OSX 10.4 and Earlier)

To setup wireless printing in OSX 10.4 and earlier:

1. Figure out which printer you want to print to. Click here for a list of available printers.
2. From the Apple menu, select System Preferences
3. Select "Print & Fax"
4. Click the + sign to add a printer
5. While holding down the Option key, click "More Printers..."
6. Select "Advanced" from the dropdown menu
7. Select "Windows Printer via SAMBA" in the "Device" menu
8. For "Device Name" enter a name to identify the printer
9. For "Device URL" enter:
   smb://username:password@onid/onid-print.scf.oregonstate.edu/printername
   (where "username" is your username and "password" is your ONID "Samba/Windows" password and where "printername" is the printer you are connecting to. Example: smb://jsmith:Ss12$RMY9@onid/onid-print.scf.oregonstate.edu/scf_main
   (your password will not be visible after it's entered here)
10. Select the printer model (if not found, select 'Generic' or the printer model if available)
11. Click "Add"
12. Print to the newly created printer.

List of available printers:

For a list of printers accessible from the public wireless network with your ONID, click here.

Engineering Students

You can configure your laptop to print to the ENGR printers wirelessly too. To find out more information, click here.

Wireless Printing For Windows

For Windows 7 and Vista 

Note: The following instructions only work with certain versions of Windows. If you have Windows 7 Home Premium, Windows 7 Home Basc, Windows Vista Home Premium, or Windows Vista Home Basic, these instructions will not work for you. If you have one of these systems, please bring your computer to the Walk-Up Computer Helpdesk on the main floor of the Valley Library, and we can set up printers for you.

All of the images below can be clicked on if you need a larger view.

Step 1 Click the "Start" circle, then click on Computer. In the "Search" bar at the top, type the following: \\ONID-print. Hit enter, and Windows will attempt to connect to the print server. Note: you must be connected to either the OSU_Secure or OSU_Access networks for this to work.

Step 2 A window should pop up asking for a username and password. Enter the following: For Username, enter "ONID\", followed by your onid username. For Password, enter your normal ONID Password. Check the box labeled "Remember my credentials."

Step 3 A big list of printers should be displayed on the screen. Scroll through the list until you find the printer you want to connect to. In the screenshot example on the right, we are connecting to the main Valley Library Printers (click on the image for a larger view). When you find the desired printer, double-click on it to connect.

Step 4 You will probably get a message similar to the one on the right saying that a driver was not found for the printer. Click on OK to browse for a printer driver. Windows should then open up a list of printers.

Step 5 At this point you will need to have the drivers for the printer you are connectiong to. Please choose from the following options: If your laptop is running Windows 7 64-bit or Windows Vista 64-bit, choose from the following drivers: Valley Library Black and White Valley Library Color Milne Lab Black and White If your laptop is running Windows 7 32-bit or Windows Vista 32-bit, choose from the following drivers: Valley Library Black and White Valley Library Color Milne Lab Black and White If the printer you are attempting to connect to is not in the list above, you will have to download the driver from the manufacturer website. You can view the list of available campus printers on This Page.

Step 6 Extract the file you downloaded above to a location that you will remember (like your desktop). Go back to the list of drivers you had open before, and click the Have Disk button. A separate window should open asking to insert a disk. Click the Browse button at the bottom.

Step 7 Navigate to the place where you extracted the printer driver. Inside the folder, you should only be able to see a single inf file to open. Select it, and click the Open button. It will then go back to the previous disk screen. Click the OK button.

Step 8 A list of available drivers from that file should be displayed. Select the correct one for the printer you are installing (View printer list here). Click the OK button. Windows should then connect to the printer, and the printer will be added to your printers list!

Click HERE for a tutorial video on Windows wireless printing.

---

For Windows XP

1. Go to "Start" -> "Control Panel" -> "Printers and Faxes"
2. Click "Add a printer"
3. In the "Add Printer Wizard" select "network printer" and click Next
4. Type the printer name. "\\onid-print\<insert queue name here>"
5. Click on "Next"
6. Click on "Yes"
7. Click on "OK"
8. Click on "Ok"
9. Install the printer driver (this can be downloaded off the web)
10. Click on "Next"
11. Click on "Finish"
12. Print out a page to test

List of available printers:

For a list of printers accessible from the public wireless network with your ONID, click here.

Engineering Students

You can configure your laptop to print to the ENGR printers wirelessly too. To find out more information, click here.

Connect to eduroam (Vista, 7)

 

Windows Vista and Windows 7 should be able to Connect to the eduroam network with the automatic instructions below. If these instructions fail, you can try connecting to eduroam manually

• Connect Automatically
• Connect Manually

---

 

Connect Automatically

To connect to the eduroam network: Click on your wireless network icon in your taskbar. Click on the eduroam network in the list, and click the Connect button. A window should pop up asking for a username and password.
A box should pop up asking for network authentication credentials. Enter your "ONID Username"@onid.oregonstate.edu in the top box, then your ONID password in the bottom box and click OK. For the Username the "@onid.oregonstate.edu" is required.
If this is your first time connecting to the eduroam network, you may be presented with a certificate warning. Please go ahead and select the Connect option Note: If you are unable to connect automatically, try the manual steps below.

---

 

Connect Manually

Below are the manual steps to connect to eduroam with Windows Vista/7. Please follow all directions closely for proper setup.

All of the images below can be clicked on if you need a larger view.

Step 1 Click Start, then click Control Panel. Once the Control Panel opens, click Network and Internet, then Network and Sharing Center, then on the left-hand side, click Manage Wireless Networks. A list of your saved wireless networks (if any) should open up.

Step 2 Click the Add button on this page. Note: If eduroam is already listed here (if you tried to add it already), delete it from the list before continuing to clear out any old settings.

Step 3 A separate window should open. When it does, select Manually Create a Network Profile.

Step 4 This will open a new connection box. Type in the following information: Network Name: eduroam Security Type: WPA2_Enterprise Encryption Type: AES Leave everything else the way it is. Once finished, it should look like the screenshot to the left (click on it for a larger view). Click the Next button when you are done.

Step 5 A window should appear saying that you Successfully added eduroam. Click the Change Connection Settings option, and a new settings window should open.

Step 6 Click on the Security tab at the top, and verify that Security type is still WPA2-Enterprise, Encryption Type is still AES, and theNetwork Authentication Method is set to Microsoft: Protected EAP (PEAP). Click on the Settings button next to the drop-down menu.

Step 7 Un-check the box next to Validate Server Certificate. Make sure that the Secure Authentication Method is set to Secure Password (EAP-MSCHAP v2), and then click the Configure button next to it.

Step 8 Un-check the box next to Automatically use my Windows logon name and password. Click OK three times to close the open settings windows.

Step 9 You should be looking at the Successfully added eduroamwindow again. Click Close to close this window. Click on the wireless icon in the lower left-hand corner of your dock, select the eduroam network from the list, and clickConnect.

Step 10 A box should pop up asking for network authentication credentials. Enter your "ONIDusername"@onid.oregonstate.edu in the top box, then your ONID password in the bottom box and click OK. For the Username the "@onid.oregonstate.edu" is required.

Step 11 If it asks you to set a location for eduroam, choose Public Network. You should now be connected to the eduroam network!

Connect to eduroam (Windows XP)

Below are the steps to connect to eduroam with Windows XP. Please follow all directions closely for proper setup.

You may be prompted to accept a certificate after connecting; please go ahead and accept the warning.  If you are unable to connect and do not receive a certificate prompt. You will need to run the script below to put the correct certificate on your computer. You may download it below.

Download File: XP Certificate Script (xp_eduroam_auth.zip)

Instructions: 

1. Download the zip file

2. Extract it to your desktop

3. Run install-certs.bat (You will need admin rights on your computer)

4. Then follow the steps below to setup your connection.

If you are unable to connect after doing this please contact the OSU Computer Helpdesk.

Step 1  Click Start, then click Run. A run box will open. When it does, type "ncpa.cpl" and click OK.

Step 2  The network connections box will open. Once it does, right-click on your Wireless Network Connection entry, and click Properties.

Step 3  A connection properties window should open. When it does, click the Wireless Networks tab at the top. Note: You should see a list of wireless networks. If eduroam is already listed, highlight it and click the Remove button to clear out all old settings. Click the Add button.

Step 4  This will open a new connection box. Type in "eduroam" for the name, then select WPA2 for network authentication, and select AES for data encryption. Click the Authentication tab at the top.

Step 5  Select Protected EAP (PEAP) for the EPA Type. Click the Properties button.

Step 6  This will open a separate properties box. Un-check the Validate Server Certificate box, then click the Configure button at the bottom.

Step 7  Another box will open. Un-check the Automatically use my Windows logon name and password box, and click OK.

Step 8 Click OK three times to close all the open settings boxes. You should be back to the Network Connections page. Right-click on the Wireless Network Connection entry and click View Available Wireless Networks.

Step 9  Windows should automatically connect to eduroam at this point. If it doesn't, just double-click on the eduroam entry to connect. Windows will begin connecting. At some point, a popup window will appear asking for credentials. Click on this popup window to open the credentials page.

Step 10  Enter your “ONID username”@onid.oregonstate.edu in the user name box, your ONID password in the password box, and leave the Logon domain box blank. Click OK, and it will connect you to eduroam.

Connect to eduroam (Mac OS X 10.5-10.8)

 

Below are the steps to connect to eduroam with OSX 10.6 (Snow Leopard) and OSX 10.7 (Lion). Please follow all directions closely for proper setup.

All of the images below can be clicked on if you need a larger view.

 

Step 1 Click the wireless icon in the upper-left hand corner and select eduroam from the list.

Step 2 A window will open asking for a username/password. Enter your ONID Username@onid.oregonstate.edu in the User Name box, and your ONID Password in the Password Box. Click OK.

Step 3 Your computer will then attempt to connect to eduroam. If you get a popup similar to the one on the right asking to verify a certificate, click Continue.

Connect to eduroam (iPad / iPod)

Below are the directions for connecting your Apple mobile device to the eduroam network on the OSU campus.

 

Step 1 Tap the the Settings on your iPad/iPod home screen.
Step 2  Select the Wi-Fi menu option. Select the eduroam network from the options that appear on your screen.
Step 3 You should now be asked to put in your username and password. For your username you will need to put your onid username with @onid.oregonstate.edu.  For your password you will need to use your ONID password.
Step 4 You may be presented with a certificate warning please go ahead and accept the warning. So that you can can connec to eduroam.  If you are unsure or want to double check the validity of the certificate, please feel free to contact the OSU Helpdesk.
Step 5 You should now see a checkmark next to eduroam and be connected to the network. If you are having any problems please contact the OSU Helpdesk.