eduroam Secure Guest Sponsorship Portal

The Secure Guest Sponsor Portal will allow registered administrators (sponsors) across campus departments an alternative means to allow network access for visitors. This method should be used for small to medium levels of granting guest access. The preferred method for large visitor access (such as conferences) will be the standard UNC-Guest access requests which should be sent to ITS-Networking prior to the event. The chart below describes the differences.

 

Guest users will have a better experience if they onboard PRIOR to coming to campus. Since certificates are valid for 2 weeks after onboarding, if they onboard one week prior to arriving to campus, they will only have 1 week of access remaining.

UNC-Guest UNC-Guest PSK eduroam Secure Guest Access
Pervasive across Campus Wireless? NO NO

YES

Secure and Encrypted? NO YES

YES

Full Network Access? NO NO

YES

Requires Client Configuration? NO YES

YES

Requires Prior Client Registration? NO NO

YES

Prerequisites:

In order to create unique usernames and accounts for eduroam Secure Guest access, you must be a registered sponsor.  You must first contact the ITS Helpdesk (Chat or Phone and ask for a ticket to be created) or submit a Help Request. Please ask for the ticket to be sent to ITS-Networking with your ONYEN requesting sponsor access.  Only after access is granted will you have the power to generate access credentials.

Sponsor Portal Workflow

  1. Registered Sponsors connect to http://wifi.unc.edu and click on the option near the bottom of the page labeled ‘Sponsor Access for Account Creation’.
    1-eSGSP-SponsorIcon
  2. Authenticate to the portal with your ONYEN and password through SSO:
    2-eSGSP-SSO
  3. To create a single account, select ‘Guest Accounts’ from the left hand menu. Once selected, click the ‘Create’ button at the bottom.
    3-eSGSP-SingleAccount
  4. Create the Guest account by doing the following:
    1. Select AutoGenerate for the username and password.
    2. First and Last Names are required fields
    3. Unless you wish to deliver the username and password through other means, we suggest you enter an email address and/or a telephone number and select the appropriate notify options. The user will receive the necessary access credentials through those options.
    4. The Account Duration Template is time in which you want the credentials to be valid from the point of creation. If you select One Week, then the client will be able to onboard as many devices as they need with those credentials for up to one week after the account was created.
      Each device they onboard is limited to 2 weeks of network access from the point the device is onboarded.
    5. You can either ‘Create’ to finish, or ‘Create and Print’ which will give open a window with a hard-copy of the credentials.

    4-eSGSP-Create

  5. You may also wish to do bulk account creations. These accounts are useful when you are planning on having a larger group of individuals, and do not wish to input a significant number of entries.
    5-eSGSP-bulk
  6. You can view the status of the accounts by clicking the ‘Guest Accounts’ option on the left.
    6-eSGSP-view

Notes about guest on-boarding:

  • Guest users will have a better experience if they onboard PRIOR to coming to campus. Since certificates are valid for 2 weeks after onboarding, if they onboard one week prior to arriving to campus, they will only have 1 week of access remaining.
  • Guest users can onboard through UNC-Setup. However, this experience has some limitations.  When they connect to UNC-Setup, ask them to open a browser and connect to wifi.unc.edu.  When they are redirected, ask them to click the green button underneath the login labeled ‘Secure Guest Access’.  This will redirect the users to the SecureW2 portal for configuration.  There is a significant difference between this onboarding and normal UNC onboarding If the device is an android device.  If so, they will need to configure their device for non Google Market Place applications.  They will be prompted to do this upon the download of the SecureW2 application.  This is similar to the way it used to be for normal UNC onboarding.  This process cannot be avoided for guests, however.
  • It is possible other operating systems may have some difficulty as well configuring through UNC-Setup. Please report problems through a remedy ticket, and we will do our best to address any issues.
  • You may also have the users onboard through any available UNC-Guest SSID. Once they are connected, have them browse to wifi.unc.edu.  There is a link at the bottom of the page labeled ‘Visitor Access Configuration’.  When they click that, it will take them to the SecureW2 configuration utility.

Instructions to give to clients before onboarding

INSTRUCTIONS FOR WINDOWS/APPLE/iOS {NOT ANDROID}

1)      Connect to the UNC-Setup SSID
2)      Open a web browser to go to wifi.unc.edu (this will direct you to the ‘Wireless Configuration Portal Authentication’ page
3)      Scroll to the bottom of the page and click the Green Button labeled ‘Secure Guest Access
4)      You will be redirected to a SecureW2 configuration site.  Your operating system should be detected and displayed
5)      If prompted to enter credentials on this page, enter them and click ‘Join Now
6)      If not prompted to enter credentials, click ‘Join Now
7)      You must download / run / install anything that is presented to you and complete the process by following the instructions (which will include entering your username and password if you did not enter it previously)
8)      For Mac OS X, you will be prompted at one point to enter your local administrator password.  This will appear like a normal Mac OS X prompt.
9)      After completion, you should be able to connect to the ‘eduroam’ SSID.

INSTRUCTIONS FOR ANDROID DEVICES:

Onboarding Android devices through the secure guest program requires carefully following these instructions.  Failure to follow these instructions EXACTLY will result in a failure of the process.

1) Configure  your device to Allow Unknown Sources.  You can do this by going into settings, general, and under security there should be an ‘unknown sources’ option.  Make sure this option is checked.  By default it is not.  After completing the process, we recommend that you turn this option back off.
2) Connect to UNC-Setup and open a web browser to go to wifi.unc.edu (this will direct you to the ‘Wireless Configuration Portal Authentication’ page
3) Scroll to the bottom of the page and click the Green Button labeled ‘Secure Guest Access
4) You will be redirected to a SecureW2 configuration site.  Your operating system should be detected and displayed
5) You will install the SecureW2 application under ‘Step 1’.  Click the Download Option.
6) Once the download is complete, you will need to install the ‘SecureW2_JoinNow.apk’ that should be in your downloads list.
7) When the install is done, click DONEDO NOT CLICK OPEN.  If you click Open by mistake, you will need to kill the secureW2 application before continuing to the next step.
8) Go back to the web browser and return to the page that you were just on. Click the ‘Join Now’ button.  This should launch the SecureW2 application.
9) Follow the remainder of the prompts, including the entering of your username and password to complete the process
10) After completion, you should be able to connect to the ‘eduroam’ SSID.