Linux/Unix - Get Connected to Eduroam

About SecureW2

SecureW2 is the university's recommended tool for connecting to the official campus Wi-Fi network. Using SecureW2 ensures that the correct security certificates are installed on your device. For your protection, be wary of unexpected Wi-Fi certificate prompts that appear as pop-ups, as they may not be legitimate or approved by the university.

Requirements

If you are coming back to campus after June 19th, 2026:

• Forget the WolfieNet-Secure and Eduroam network on your device to remove any outdated Wi-Fi profiles or certificates.

Once you have forgotten the necessary networks OR if you are connecting to the campus Wi-Fi for the first time, follow the setup instructions below.

Instructions

1. Connect to the SBU-GetConnected wifi network and use your browser to connect to the internet temporarily while onboarding.
    

2. Navigate to the Stony Brook University SecureW2 certificate generation portal SecureW2 eduroam Portal. Once on the landing page, select Non-specific OS and click the Sign In button.
    

   

3. Login with your NetID name and password and authenticate with DUO mobile two-factor authenticator.
    

   

    

4. Before creating the certificate, you need to identify your device's MAC address (physical hardware address). 
   a. Open your terminal application.
   b. Execute the following command:

   Bash

   ip a

   c. Locate your wireless interface (typically starts with wlan or wlp). Look for the string labeled link/ether and copy the 12-character alphanumeric physical address

5. Return to your web browser window. 
   a. Set the Operating System dropdown to User-Defined. 
   b. Enter a friendly identifier in the User Description field (e.g., research-laptop). 
   c. Paste the copied hardware address directly into the MAC Address field.
   d. Click Create.
    

   

6. This will generate a pop-up asking you to generate a secure passphrase to protect your downloaded private key. Enter a strong password that meets the requirements (at least 6 characters, including uppercase, lowercase, numbers, and symbols). Important: Remember or write down this passphrase - you will need it during the final Wi-Fi authentication step. Click Submit.
    

7. On the subsequent initialization page, click the P12 hyperlink to download your personal user certificate bundle. It will download straight to your computer's Downloads folder. Once saved, click the red Next button. 
    

   

   
   On the configuration summary page that follows, click on the CA Certificate links under the profile options list to save the required root authority certificates to your local storage. Use the first certificate on the list.
    

   

8. Open your Linux/Unix System Network Settings panel, select Eduroam, and configure the authentication modal utilizing the following parameters: 
   a. Wi-Fi security: WPA & WPA2 Enterprise 
   b. Authentication: TLS 
   c. Identity: netid@stonybrook.edu  
   d. CA certificate: Browse and select the root certificate file downloaded in Step 6 (.cer file)
   e. User certificate: Browse and select the personal .p12 file downloaded in Step 6 
   f. User private key: Browse and select the same .p12 file path again 
   User key password: Type the security passphrase you manually created earlier during Step 5
   g. Click Connect on the bottom right of the screen
    

   

9. Your computer should now negotiate a connection via secure TLS handshake. Open your system Wi-Fi tray to verify that Eduroam displays a status of Connected.