The WLAN eduroam

www.eduroam.org

The eduroam WLAN is a guest WLAN that can be used by DESY employees as well as by users of other research institutes. DESY employees can log on to the WLAN with their DESY account, while users of other institutes use their account of their home institute.

This means not only that people from other institutes can log on to the eduroam WLAN at DESY, but also that DESY employees can connect to eduroam with their device at other institutes after the setup, provided that the respective institute offers eduroam as WLAN network.

Preliminaries

To establish a connection via eduroam with a DESY account, you need a corresponding activation (resource "eduroam"). This can be done by the group administration responsible for you or by the IT helpdesk (e-mail: uco@desy.de, Tel: 5005), stating your account name.

Shortly after the activation, you will receive a message asking you to set your WLAN password in the DESY Registry. If necessary, please find instructions about that topic on this website.

How do I connect my device to the eduroam WLAN?

The login to the Eduroam network is done via the app application "Easyroam". It is therefore no longer necessary to download and configure WLAN profiles yourself, as these are generated and installed via the Easyroam app. This makes it easier to connect to the eduroam network. On this website you will find the instructions for the most common operating systems.

Instructions in english for all devices will be added soon here! For instructions on configuring eduroam on your device please see German version of this website for the time being (https://it.desy.de/dienste/netzwerke/wlan_am_desy/eduroam/)

Please note: During the configuration of eduroam you need an internet connection via another network. The following networks can be used for this purpose:

  • Science Hotspot
  • mobile network
  • wired network

 

iPhone / iPad

1. Please make sure that you are connected to the internet. For this you can use another WLAN, for example the Science Hotspot in Hamburg, DESY guest or DESY guest legacy in Zeuthen, or your mobile data.

2. Important: Existing eduroam profiles have to be deleted beforehand. This action is needed if you already have an eduroam profile on your device. A connection without a profile was possible. To delete a profile follow these steps:

  1. Go to the system settings and then to "General" (figure 1).
  2. Scroll down to "VPN & Device Management" (fig. 2).
  3. There you can find your installed WLAN configuration profiles. Choose your old DESY eduroam profile (fig. 3). If there is no such profile, you do not need to delete anything and can proceed with the installation of the Easyroam app.
  4. Delete the profile using the button "Remove Profile" (fig. 4).

 

Figure 1

Figure 2

Figure 3

Figure 4

3. When your previous configuration profile was deleted or if you did not have one in the first place, you can now install the easyroam app from the Apple App Store and open it.

Here is a QR code that links directly to the Easyroam app in the App Store.

 

4. After opening the app, you have two options ""Login through Website" and "Login using QR-Code". Please choose "Login through Website" (fig. 5).

5. In the now open window use the search bar to find "Deutsches Elektronen-Synchrotron DESY" and click on it (fig. 7).

6. Now please log in using your DESY account and account password (not the eduroam or WLAN password) (fig. 8).

 

Figure 5

Figure 6

Figure 7

Figure 8

 

 

 

 

 

 

 

 

 

7. Clicking on "Install new Profile" starts the profile installation (fig. 9).

8. Now confirm the profile installation by clicking on "Confirm" (fig. 10).

9. Afterwards you should get the message "Easyroam wants to connect to eduroam". Please confirm this by clicking "Connect" (fig. 11).

10. You are now connected to eduroam.

 

Figure 9

Figure 10

Figure 11

 

 

 

 

 

 

 

 

 

Should your device be inable to establish a connection after following these steps, try restarting your device first. If this does not fix the problem, please contact the DESY IT helpdesk (UCO) stating your device model and OS-Version as well as your DESY account name (E-mail: uco@desy.de, Phone: 5005).

Renew the connection profile

The validity of the connection profile regularly expires after two years. Before this period expires, the connection profile must be renewed. Without a valid connection profile, a connection to eduroam can no longer be established. You will be informed about the expiration of the profile ahead of time by the Easyroam app. Follow the steps below to renew the profile before it expires.
  1.     Open the Easyroam App
  2.     In the upper area of the overview, you can see how long your profile is valid. Click on the "Manage" button below it (Figure 12).
  3.     In the dialog that now opens, click the "Request new" button (Figure 13).
Your profile is now renewed and a new date for the end of validity should be visible accordingly.



 

 

Android 9 and older
Since DESY no longer issues devices with Android up to version 9, support can also only be provided with restrictions.

However, logging on to the eduroam WLAN is still possible. Instructions from the German Research Network can be found on the following website: Setting up eduroam an Android 9 and older

 

Android 10 and newer

Please notice: These instructions were written using a Samsung smartphone with Android version 13 as an example. The displayed system settings and menus can vary according to device model and Android version.

1. Please make sure that you are connected to the internet. For this you can use another WLAN, for example the Science Hotspot in Hamburg, DESY guest ord DESY guest legacy in Zeuthen , or your mobile data.

2. Important: Existing eduroam profiles have to be deleted beforehand. This action is needed if you already have an eduroam profile on your device. To delete a profile follow these steps:

  1. Go to the system settings and then to "Connections" (figure 1).
  2. Now go to "WiFi" (?) (fig. 2).
  3. There you find all your available WLAN / WiFi connections. Choose the three dots in the upper right corner to find "Advanced Settings" (fig. 3).

 

Figure 1

Figure 2

Figure 3

  1. Next, click on "Manage Networks" (?)  (fig. 4).
  2. Here is a list of your saved networks. Klick on the bin symbol down below (fig. 5).
  3. Left of the network names are now boxes. Tick the box "eduroam" and klick on the bin symbol again (fig. 6).

 

Figure 4

Figure 5

Figure 6

3. When your previous configuration profile was deleted or if you did not have one in the first place, you can now install the easyroam app from the Google App Store and open it.

Following is a QR code for the Play Store download

 

4. After opening the app, you have two options ""Login through Website" and "Login using QR-Code". Please choose "Login through Website" (fig. 7).

5. In the now open window use the search bar to find "Deutsches Elektronen-Synchrotron DESY" and click on it (fig. 8 and 9).

6. Now please log in using your DESY account and account password (not the eduroam or WLAN password) (fig. 10).

 

Figure 7

Figure 8

Figure 9

Figure 10

 

 

 

 

 

 

 

 

 

7. Clicking on "Install new Profile" starts the profile installation (fig. 11).

8. Now confirm the profile installation by clicking on "Confirm" (fig. 12).

9. Afterwards you should get the message "Easyroam wants to connect to eduroam". Please confirm this by clicking "Connect" (fig. 13).

10. You are now connected to eduroam.

 

Figure 11

Figure 12

Figure 13

 

 

 

 

 

 

 

 

 

Should your device be inable to establish a connection after following these steps, try restarting your device first. If this does not fix the problem, please contact the DESY IT helpdesk (UCO) stating your device model and OS-Version as well as your DESY account name (E-mail: uco@desy.de, Phone: 5005).

 

MacOS 12 and older

For MacOS you can download a connection profile from the easyroam website. This profile is only valid for your account and should not be shared.
The following section describes how to create a connection profile and install it on your MacOS device.
You can learn more on how to set up a connection profile on your MacOS device in the following section:

Important:
Please ensure that you have an active internet connection for the following steps (e.g. science hotspot in Hamburg, DESY guest or DESY guest legacy in Zeuthen or cable connection). Please make sure that there are no existing  eduroam connection settings on your MacOS device.


 

This section is seperated in three sub-sections:

  1. Deleting an existing eduroam connection
  2. Generating a connection profile
  3. Installation of the connection profile



 

Deleting an existing eduroam connection

Before setting up a new eduroam connection, you should delete an existing eduroam connection, since these can otherwise cause issues with the new connection profile.

You can delete an existing connection in the MacOS system settings. To do this, please open the system settings ("Apple icon" -> "System settings"). In the lower right corner of the window, please select "Profiles". (Figure 1)
If "Profiles" is not listed here, you can continue with the section "Generating a connection profile".

 

Figure 1

Here you can delete the old eduroam profile. To do this, please select eduroam and then click the "-" symbol (Figure 2).

 

Figure 2

A new window will open in which you have to confirm the deletion and complete it by entering your password (Figure 3).

 

Figure 3

Generating a connection profile

You can generate and download a new connection profile on the easyroam webseite. The process is described in the following section.

To generate a connection profile for eduroam, please open the website with a browser of your choice (e.g. Safari, Firefox) https://www.easyroam.de/. Search for "DESY" and select "Deutsches Elektronen-Synchrotron DESY" by mouse click (Figure 4).

 

Figure 4

Then log in to the login service with your DESY account. Here, please use your usual login information and not the WLAN password. Afterwards please confirm by clicking the "Anmelden" button (Figure 5).

 

Figure 5

After the login, you reach the page for creating a connection profile.
To generate a profile for MacOS please select "Manual options". You should then have several options. Please select "Mobile Config (Apple)". Now please enter a name for your MacOS device.
When you have completed the entry, you can generate the profile using the "Generate profile" button (Figure 6).

 

 

 

Figure 6

If everything was selected correctly, the browser should now download the connection profile and you should see "Download completed" (Figure 7).

 

Figure 7

Installation of the connection profile

The previously generated and downloaded connection profile can now be installed on your MacOS device. The process is described in the following section.

To start the installation, please double click the downloaded profile in your Downloads folder. The profile name ends with ".mobileconfig". (Figure 8)

 

Figure 8

After double-clicking the profile, a message should pop up at the top-right corner of the screen. This message states that the profile can be checked and installed in the system settings. (Figure 9)

 

Figure 9

To do this, please open the system settings ("Apple icon" -> "System settings"). In the lower right corner of the window, please select "Profiles". (Figure 10)
By selecting the item "Profiles", you will get to the overview page of all profiles. (Figure 11)

 

Figure 10

There should now be an eduroam profile with a white exclamation mark in a yellow triangle on the overview page. This is the downloaded connection profile for eduroam. By clicking the eduroam profile you can check the properties of the profile and start the installation.

 

Figure 11

Now all properties of the eduroam profile should be displayed. You can check them and install the profile by clicking on the "Install" button (Figure 11).
You now have to confirm the installation by entering your local MacOS password. You should then be able to connect to the eduroam network.

 

No connection possible

Our experience has shown that it often helps to delete and reinstall the installed profile if no connection is possible.

To do this, please go through the steps "Deleting an existing eduroam connection" and "Installation of the connection profile" again.

 

Renew the connection profile

The connection profile expires after two years. Before expiration, a renewal of the connection profile is required. Without a valid connection profile, no eduroam connection is possible. You can check the validity of the profile by double-clicking on the profile under the "Expires" entry.

To renew your profile, please follow the steps "Generating a connection profile" and "Installing the connection profile" in the installation instructions.

 

MacOS 13 and later

For MacOS you can download a connection profile from the easyroam website. This profile is only valid for your account and should not be shared.
The following section describes how to create a connection profile and install it on your MacOS device.
You can learn more on how to set up a connection profile on your MacOS device in the following section:

Important:
Please ensure that you have an active internet connection for the following steps (e.g.
science hotspot in Hamburg, DESY guest or DESY guest legacy in Zeuthen or cable connection). Please make sure that there are no existing  eduroam connection settings on your MacOS device.

 

This section is seperated in three sub-sections:

  1. Deleting an existing eduroam connection
  2. Generating a connection profile
  3. Installation of the connection profile

 

Deleting an existing eduroam connection

Before setting up a new eduroam connection, you should delete an existing eduroam connection, since these can otherwise cause issues with the new connection profile.

You can delete an existing connection in the MacOS system settings. To do this, please open the system settings ("Apple icon" -> "System settings"). In the left section of the window that now opens, please select "Privacy & Security". A submenu should open with the item "Profiles" at the bottom. (Figure 1)
If you select "Profiles", you reach the overview page of all installed profiles. (Figure 2)
If "eduroam" is not displayed here, you can continue with the section "Generating a connection profile".
 

 

Figure 1

Here you can delete your old eduroam profile. To do this select eduroam and klick on the "-"-symbol (Figure 2).

 

Figure 2

Afterwards a new windows will open, in which you can confirm the deletion and complete it by entering your MacOS password (Figure 3).

 

Figure 3

Generating a connection profile

You can generate and download a new connection profile on the easyroam webseite. The process is described in the following section.

To generate a connection profile for eduroam, please open the website with a browser of your choice (e.g. Safari, Firefox) https://www.easyroam.de/. Search for "DESY" and select "Deutsches Elektronen-Synchrotron DESY" by mouse click (Figure 4).

 

Figure 4

Then log in to the login service with your DESY account. Here, please use your usual login information and not the WLAN password. Then please confirm by clicking the "Anmelden" button (Figure 5).

 

Figure 5

After the login, you reach the page for creating a connection profile.
To generate a profile for MacOS please select "Manual options". You should then have several options. Please select "Mobile Config (Apple)". Now please enter a name for your MacOS device.
When you have completed the entry, you can generate the profile using the "Generate profile" button (Figure 6).

 

 

Figure 6

If everything was selected correctly, the browser should now download the connection profile and you should see "Download completed" (Figure 7).

 

Figure 7

Installation of the connection profile

The previously generated and downloaded connection profile can now be installed on your MacOS device. The process is described in the following section.

To start the installation, please double click the downloaded profile in your Downloads folder. The profile name ends with ".mobileconfig". (Figure 8)

 

 

Figure 8

After double-clicking the profile, a message should pop up at the top-right corner of the screen. This message states that the profile can be checked and installed in the system settings. (Figure 9)

 

Figure 9

To do this, please open the system settings ("Apple icon" -> "System settings").In the left section of the window that now opens, please select "Privacy & Security". A submenu should open with the item "Profiles" at the bottom. (Figure 10)
By selecting the item "Profiles", you will get to the overview page of all profiles. (Figure 11)

 

Figure 10

There should now be an eduroam profile with a white exclamation mark in a yellow triangle on the overview page (Figure 11). This is the downloaded connection profile for eduroam. By double-clicking the eduroam profile you can check the properties of the profile and start the installation

 

Figure 11

Now all properties of the eduroam profile should be displayed. You can check them and install the profile by clicking on the "Install" button (Figure 12).
 

 

Figure 12

You now have to confirm the installation by entering your local MacOS password. You should then be able to connect to the eduroam network.

 

No connection possible

Our experience has shown that it often helps to delete and reinstall the installed profile if no connection is possible.

To do this, please go through the steps "Deleting an existing eduroam connection" and "Installation of the connection profile" again.

 

Renew the connection profile

The connection profile expires after two years. Before expiration, a renewal of the connection profile is required. Without a valid connection profile, no eduroam connection is possible. You can check the validity of the profile by double-clicking on the profile under the "Expires" entry.

To renew your profile, please follow the steps "Generating a connection profile" and "Installing the connection profile" in the installation instructions.

 

Windows

1. Make sure that there is a connection to the internal DESY network. Preferably use the wired network for this, alternatively a connection to the DESY WLAN or to the guest WLAN "Science Hotspot" in Hamburg, "DESY guest" or "DESY guest legacy" in Zeuthen in connection with VPN is also possible.

Existing eduroam WLAN profiles do not need to be removed manually on Windows, as this step is performed by the Easyroam app.

2. Normally, the installation of Easyroam on DESY-Windows laptops should be executed automatically via DSM Software-Shop as soon as you have logged in to the device. The message appears as shown in Figure 1. Please confirm it via click on Ok.

 

Figure 1

If you are not offered the installation of the package automatically, start the installation of Easyroam manually from the DSM Software Shop by installing the package "easyroam_Umstellung_eduroam".

3. Then open Easyroam from the Windows Start menu. This opens a web page. Here, search for "DESY" in the selection of available institutes and select it (Figure 2).

 

Figure 2

4. A login site opens up. Please log in using your DESY account name and password (not your wifi password) (fig. 3).

 

Figure 3

5. After a successful login you will land in the "Home" menu of the app. Now click on "Install new profile" (fig. 4).

 

Figure 4

6. The now installed configuration profile will be shown in the main menu, marked as "valid" (fig. 5).

 

Figure 5

7. Please reboot your computer now. After that you should be able to choose and connect to the WLAN "eduroam".

Important note in case of subsequent connection problems

If the connection is not successful after following these steps, please first check whether pressing the button "Request new", as well as a subsequent reboot of the device, will remedy the situation. Otherwise, please contact the central IT helpdesk, stating the device model, the operating system version as well as your DESY account name (e-mail: uco@desy.de, Tel: 5005).

 

Renew the connection profile

The validity of the connection profile regularly expires after two years. Before this period expires, the connection profile must be renewed. Without a valid connection profile, a connection to eduroam can no longer be established. You will be informed about the expiration of the profile ahead of time by the Easyroam app. Follow the steps below to renew the profile before it expires.
  1.     Open the Easyroam app
  2.     In the upper area of the overview you can see how long your profile is valid. Click the "Create new" button below it (Figure 6).
Your profile is now renewed and a new date for the end of validity should be visible accordingly.

 

Linux

Since DESY does not provide any Linux work computers, there is only limited support for WiFi on Linux laptops.

However, setting up eduroam using the Easyroam app is possible on Linux devices. Instructions on that from the DFN can be found on the following website:

https://doku.tid.dfn.de/en:eduroam:easyroam#installation_der_easyroam_profile_auf_linux_geraeten

 

FAQ

What is the maximum number of devices that can be set up with Easyroam?
With Easyroam, no more than five devices can be set up to connect to eduroam at the same time. We have no influence on this maximum number, as it was set by the DFN.

If you have devices on which you no longer need eduroam, you should therefore revoke the connection profile for the respective device in the Easyroam app. This is also possible from other devices on which you have installed and set up Easyroam.

 

What can I do if I have connection problems?

If you experience connection problems, it may help to reinstall the profile via the Easyroam app. For this purpose, the "Reinstall" option is available via the Easyroam app in the administration of the respective profile.

If this does not help, please check whether setting up the connection profile again via the "Request new" button will remedy the situation instead.

On operating systems where the Easyroam app is not available, this simple option is not available. In these cases, the only way to set up a new profile is to set up the connection profile again, including deleting it beforehand.

If these steps do not help either and you are using a smartphone, please proceed as follows:

  1. Uninstall the App
  2. Delete the WLAN Profil via the Settings
  3. Reboot your Smartphone
  4. Install the App and again, follow the above mentioned steps for configuration

 

If these steps do not resolve the situation, please contact the central IT helpdesk (e-mail: uco@desy.de, tel: 5005), stating your account name, the device model and the operating system version used.

 

Which devices can be supported by the IT Helpdesk?

For devices that do not have a current operating system version and therefore no longer receive operating system updates, the IT helpdesk can provide no or only very limited support. If the usual procedures for solving problems do not help, a new device should be procured in the foreseeable future. At the time Easyroam was introduced (06/2023), in particular Android devices running operating system version 10 or older experienced an increasing number of problems that could not be solved or could only be solved with an extremely high expenditure of time.

  • You can read which Android versions are still supported and updated on this page.
  • Which iOS or iPadOS versions are still supported and updated, you can read on this page.

 

General Information


Please note that by using Easyroam with your DESY account login you are limited to setting up up to five WLAN devices for eduroam.

Support


In case of questions or problems please contact the DESY IT helpdesk (E-mail: uco@desy.de, phone: 5005).