Secure Wireless :: How to Connect :: Windows XP

Printer-friendly versionSend to friendPDF version

Before You Start

To connect to the HSUWireless-Secure network, your computer must support the WPA2 security standard, and you must have installed the latest version of Windows XP (Service Pack 2 or newer). To update your XP installation, do one of the following:

  1. Go to the Microsoft website, select Windows Updates from the Downloads menu, and follow the on-screen instructions OR
  2. Purchase a copy of Windows XP Service Pack 3 on CD and install it directly on your machine.

If at any time during the configuration process described below you do not see the options referred to, repeat the Windows Update process to ensure your computer is up-to-date. If you are still unable to see the options after updating, you may need to upgrade your system to Windows 7.

Configuring Your Computer Automatically (Recommended)

Follow this link to start the QuickConnect Process: http://www3.humboldt.edu/quickconnect

Configuring Your Computer Manually

Step 1: Right-click on the Wireless Network Icon in the System Tray and select View Available Wireless Networks.

Right click the Wireless Network Icon in the System Tray, and select View Available Wireless Networks.
Step 2: The Wireless Network Connection box is displayed. Click Change Advanced Settings.

Click Change Advanced Settings from the Wireless Network Connection Box

Step 3: In the Wireless Network Connection Properties box, ensure that the following two boxes are checked:

  • Show icon in notification area when connected
  • Notify me when this connection has limited or no connectivity

Then select the Wireless Networks Tab.

First; - Ensure that show icon in notification area when connected is checked. - Notify me when this connection has limited or no connectivity is checked. Then: - Select the Wireless Networks Tab.
Step 4: Ensure the Use Windows to configure my wireless network settings box is checked, then click Add.

Ensure the Use Windows to configure my wireless network settings box is checked, then click Add.

Step 5: Enter the network name HSUWireless-Secure exactly as shown below and then:

  • Check Connect even if the network is not broadcasting.
  • Select WPA2 for Network Authentication.
  • Select AES for Data encryption.

Click OK to continue.

Enter HSUWireless-Secure (VERY important - this name is CASE SENSITIVE) into the Network name field. - Select WPA2 for Security type. - Select AES for Encryption type. - Check Connect even if the network is not broadcasting. - Click OK to continue.

Note: If the WPA2 and AES options do not appear in the drop-down boxes, you may need to update your version of Windows following the instructions at the top of this page. If WPA2 and AES still do not appear after running Windows Update, you may need a new wireless network adapter.

Step 6: Select the Authentication Tab and then Protected EAP (PEAP) for EAP Type. Uncheck all other boxes.

Select the Authentication Tab at the top of the Wireless Network Properties Box - Then select Protected EAP (PEAP) for EAP Type, and uncheck all other boxes.
Step 7: Click Properties

 Click Properties

Step 8: Ensure that the Validate Server Certificate option is checked and then

  • Check Connect to these servers and enter wireless.humboldt.edu
  • Under Trusted Root Certification Authorities, check the box alongside Verisign Class 3 Public Primary Certification Authority - G5.
IMPORTANT

If you do not see Verisign Class 3 Public Primary Certification Authority - G5 in the list, you will need to install this certificate.

Ensure Validate Server Certificate is checked. - Check the box next to "Connect to these servers" and enter wireless.humboldt.edu - Under Trusted Root Certification Authorities look for Verisign Class 3 Public Primary Certification Authority - G5. - IF you do not see Verisign Class 3 Public Primary Certification Authority - G5 in the list then click HERE.
Step 9: Ensure the Authentication Method is set to Secured Password (EAP-MSCHAP v2) and ensure Fast Reconnect is checked. Click the Configure button.

Ensure the Authentication Method is set to Secured Password (EAP-MSCHAP v2). - Ensure Fast Reconnect is checked. - Click the Configure button.

Step 10: Ensure that Automatically use my Windows logon name and password (and domain if any) is unchecked and click OK.

Ensure that Automatically use my Windows logon name and password (and domain if any) is unchecked and click OK.

Step 11: Click OK to exit the Protected EAP Properties window.

Step 12: Click OK to exit the Wireless Network Properties window.

Step 13: Click OK to exit the Wireless Network Connection Properties window.

You should now see the following System Tray notification in the bottom right of your desktop.

You should now see a system tray notification in the bottom right of your desktop.

Step 14: Click on the notification message and a login box will be displayed. Enter your HSU User Name and Password and leave Logon domain blank. Click OK

Click the notification message and a log in box will be displayed. - Enter your HSU User Name and Password - Leave Logon domain blank - Then Click OK

After a few seconds, you will be connected to the secure wireless network. To confirm you are successfully connected, you can hover your mouse cursor over the wireless icon in your system tray; you should see HSUWireless-Secure. If you do not, you will need to review the server certificate to ensure that it is valid. A Validate Server Certificate box will appear automatically to enable you to do this; click View Server Certificate.

After a few seconds you will connect to the secure wireless network. To confirm you are successfully connected, hover your mouse over the wireless icon in your system tray; you should see HSUWireless-Secure. If you do not, you must trust the signing certificate first only after carefuly examining it. Click View Server Certificate.

Ensure that the certificate is valid by checking that it:

  • has not expired
  • is issued to wireless.humboldt.edu
  • is issued by Verisign Class 3 Secure Server - G3

Click OK

Ensure that the certificate is valid: - Not Expired - Issued to: wireless.humboldt.edu - Issued by: Verisign Class 3 Secure Server - G3 - Then Click OK

Click OK to close the Validate Server Certificate window.

Click OK to close the Validate Server Certificate window.

If you have never used wireless before at HSU, there are a couple more one-time steps you may need to take.

  1. When you open your browser, you may be required to agree to the HSU Appropriate Use Policy.To do this, simply digitally sign the document with your HSU User Name and Password.
  2. You may be asked to install PolicyKey software for Windows after you open your browser. Follow the on-screen instructions to download and install the software.


Installing the Verisign Root Certificate under Windows XP

If you did not see the Verisign Class 3 Public Primary Certification Authority - G5 certificate in the Trusted Root Certification Authorities window, you must install it following the instructions below:

Step 1: To download the required root certificate, right-click on this link and select Save Link As, or Save Target As. For simplicity, we recommend you save it to your desktop.

Step 2: Click Close after the software has finished downloading.

To avoid seeing any certificate trust errors, you must also install the Verisign Secondary Intermediate Certificate into your Certificate store. Here's how:
Step 3: To download the required intermediate certificate, right-click on this link and select Save Link As, or Save Target As. For simplicity, we recommend you save it to your desktop.

Step 4: Click Close after the software has finished downloading.

Step 5: Right-click on the certificate icon(s) one at a time and choose Install Certificate. The Certificate Import Wizard will pop up. Click Next.

Once you have downloaded the certificates, right-click on the icon(s) one at a time and choose Install Certificate The Certificate Import Wizard window will pop up, click Next

Step 6: Click the radio button labelled Automatically select the certificate store based on the type of certificate, then click Next.

Now, click the radio button titled Automatically select the certificate store based on the type of certificate, then click Next.

Step 7: Click Finish to complete the installation.

Now, click Finish to complete the installation.
IMPORTANT NOTE:
You may need to close and re-open the Protected EAP Properties window when you return to the configuration instructions before you see the VeriSign Class 3 Public Primary Certification Authority - G5 certificate listed. To do this, just click Cancel in the Protected EAP Properties window and repeat Steps 7 through 10 of the configuration instructions.

When you restart your computer after shutdown or from screen saver or hibernation mode, it may not always immediately reconnect to the secure wireless network. You can either wait for the connection to be made or force it to make the connection manually by right-clicking on the Wireless Network Icon in the System Tray and selecting Repair.

 

Related Topics

Secure Wireless
feedback