Question

How do I connect to the SU_secure wireless network?

Resolution

Seattle University has deployed the wireless network SU_secure, which has strong encryption and authentication to maintain the privacy of the university community.  Seattle University student, faculty, and staff accounts can connect to SU_secure.  Guest accounts cannot authenticate on the SU_secure, and should use SU_wireless where available.  Due to multiple WiFi networks existing at Seattle University, SU_Secure must be configured manually the first time that your computer connects to it.  This article shows how to do so on Microsoft Windows 7, Vista, XP, and Apple OS X.  

To jump directly to the guide for your operating system, click on one of the links below:

Windows 8 [PDF]

Windows 7 and Vista

Windows XP

Mac OS X

iPhone

Android

Connect to SU_secure Wireless on Windows 7 and Vista

Click here to download this guide in PDF format.

Step 1: Open Manage wireless networks.

  • Click on the Start Menu
  • Click on Control Panel
  • Open Network Sharing Center
  • Open Manage Wireless Networks

Step 2: Configure a profile for SU_secure.

  • In the Manage wireless networks that use (Wireless Network Connection) window, click on the Add button.
SU_secure Win7 1
  • In the Manually connect to a wireless network window, select Manually create a network profile.
SU_secure Win7 2
  • In the Manually connect to a wireless network window, enter the following options:
    • Network Name: SU_secure  
    • Security type: WPA2-Enterprise
    • Encryption type: AES
    • Select the checkbox for Start this connection automatically
     
  • Click Next.

SU_secure Win7 3

  • In the window that appears, select Change connection settings.
SU_secure Win7 4
  • In the SU_secure Wireless Network Properties window, select the following options:
    • Select the check box for Connect automatically when this network is in range.
    • Select the Security tab
     

SU_secure Win7 5

  • On the Security tab, make sure that the following options are enabled:
    • Security type: WPA2-Enterprise
    • Encryption type: AES
    • Choose a network authentication method: Microsoft: Protected EAP (PEAP)
     
  • Click on the Settings button.
SU_secure Win7 6
  • In the Protected EAP Properties window, select the following options:
    • Validate server certificate should be unchecked.
    • Enable Fast Reconnect should be unchecked.
     
SU_secure Win7 7
  • Click on the Configure button next to Secured Password (EAP-MSCHAP-v2).

SU_secure Win7 8


  • For University issued laptops, select Automatically use my Windows logon name and password.
  • For Personal laptops, make sure that Automatically use my Windows logon name and password is NOT selected.
SU_secure Win7 8
  • Click OK.

 

Step 3: Connect to SU_secure.

  • Select the Wireless Network Connections icon in the lower right hand corner of your screen.
SU_secure Win7 9
  • Select SU_secure from the list and click on Connect.
SU_secure Win7 10
  • A window will pop up and indicate that it is attempting to connect to a SU_secure.
SU_secure Win7 11
  • Personally owned computers will be prompted to enter their SU network credentials when logging on to the network.
    Note: If you change your password at any time, you will need to revisit this step.
SU_secure Win7 12

 

 

Troubleshooting SU_secure Setup or Connectivity on Windows 7 or Vista

Have trouble connecting to SU_secure?  Which of the following applies to your situation?

Windows 7 can't connect to su_secure
Windows 7 periodically disconnects from WPA2 Enterprise wireless 

 

Windows 7 can't connect to su_secure

Step 1Confirm the key configuration parameters in the wireless profile 

Compare settings in the su_secure profile to the posted configuration instructions and confirm 

  •  Security type: WPA2-Enterprise
  •  Encryption type: AES
  •  Authentication method: Microsoft Protected EAP (PEAP)
  •  Validate server certification should NOT be checked
  •  Enable Fast Reconnect should NOT be checked
  •  Automatically use my Windows logon name and password:
    •  NOT checked for student owned laptops
    •  Checked for University owned laptops
     

Step 2: Verify the Username and Password

SU_secure requires an active, non-Guest SeattleU username and password for authentication against Active Directory.  If the user cannot authenticate (login) to owa.seattleu.edu or mysu.seattleu.edu  from a wired connection their account might be locked or disabled and they should reset it by going to https://pwreset.seattleu.edu.   Guest accounts are not allowed to use su_secure because such accounts lack the necessary group membership(s) to be fully authenticated by the wireless control system.

Step 3: Verify the wireless adapter is enabled in the operating system

Start button, Control Panel, Network and Sharing Center, Change Adapter Settings.  Locate the Wireless Network Connection. Correct settings include ‘Not connected’ or the name of a wireless network. If it shows Disabled you must Enable it - right click, select Enable.

Step 4: Verify the computer can see wireless networks

Start button, Control Panel, Network and Sharing Center, Change Adapter Settings.  Right-click the Wireless Network Connection and select Connect/Disconnect; the wireless networks available at that location should be displayed. Click SU_wireless then select Connect.  The Wireless Network Connection should change to ‘Identifying’ then ‘seattleu.edu (Unauthenticated)’.  Getting this result confirms the wireless adapter is working with an unsecured network.

Step 5: Verify all operating system updates and patches have been applied

Start button, All Programs, Windows Update.  Click the Check for Updates button.

Step 6: Verify the wireless driver is the latest version

Many wireless connectivity issues are due to bugs in the wireless adapter drivers.  Start button, Control Panel, Device Manager, Network Adapters, locate the Wireless adapter and record the name (example: Wireless LAN Mini-PCI Express Adapter II) , double-click it and to display the Properties window, select the Driver tab, select Driver Details and make note of the Provider and File version.  Google the wireless adapter name and check that manufacturer’s support website for updated drivers.  Review the Readme file for package and driver version numbers, installation instructions, and any Problem Fixes related to wireless connectivity issues.   When you see references such as “Fixed an issue where wireless reconnection could not be made without rebooting after disconnection” there clearly was a problem in the previous driver version(s).  Note: updates to wireless adapter driver files may require the user to re-enter security information.

Step 7: Check for applications known to conflict with WPA2/AES wireless networks

  • Symantec Endpoint Protection: installed or used previously during Windows migration.  Original support document is http://answers.microsoft.com/en-us/windows/forum/windows_7-networking/unable-to-connect-to-company-wireless-network/3bcd12b1-a0d8-4357-bded-07da96259920?page=3.  Some registry keys may be incorrect. Review HKLM\System\CurrentControlSet\services\RasMan\PPP\EAP.  In each of the numbered keys look for something like ConfigPathBackup and its corresponding ConfigPath - there were a number of these.  Delete the original Key (e.g. ConfigPath) and reinstate the original by renaming ConfigPathBackup to ConfigPath for each of these the state is now restored to it pre Symantec state - each of the keys was pointing to a Symantec location that no longer existed and by restoring the backup key path all was well.  Also search registry for C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SymRasMan.dll; it should be SymRasMan64.dll .
  •  Firepass VPN client: temporarily disable it, delete the su_secure wireless profile, recreate the su_secure profile, then test access before re-enabling the VPN client.
  •  Norton/Symantec anti-virus: temporarily disable it, delete the su_secure wireless profile, recreate the su_secure profile, then test access before re-enabling the anti-virus software.

Step 8: Disable IPv6 tunnel interfaces

Microsoft recommends that you leave IPv6 enabled, even if you do not have an IPv6-enabled network.  But disabling the IPv6 tunnel interfaces has resolved some wifi connectivity issues. You must be logged on to the computer as a member of the Administrators group, or your user account must be granted permissions to edit the Windows registry.  Original support document is  http://support.microsoft.com/kb/929852.

Step 9: When in doubt, delete the wireless profile and re-create it following instructions at www.seattleu.edu/oit/securewireless.

 

Windows 7 periodically disconnects from WPA2 Enterprise wireless

Step 1: Check your Power Management profile
If you are having a problem with your wireless connection after resuming from hibernate or sleep, or are having intermittent connectivity issues, try to adjust your Power Management profile to change your Wireless Adapter Settings to Maximum Performance.  To do this click “Change Plan Settings” next to your Power Profile, and choose “Wireless Adapter Settings” and set it to Maximum Performance. You should do this with all of your power profiles. Original support document is http://windows.microsoft.com/en-us/windows7/products/features/power-management.

Step 2: Verify the wireless driver is the latest version
Many wireless connectivity issues are due to bugs in the wireless adapter drivers.  Start button, Control Panel, Device Manager, Network Adapters, locate the Wireless adapter and record the name (example: Wireless LAN Mini-PCI Express Adapter II) , double-click it and to display the Properties window, select the Driver tab, select Driver Details and make note of the Provider and File version.  Google the wireless adapter name and check that manufacturer’s support website for updated drivers.  Review the Readme file for package and driver version numbers, installation instructions, and any Problem Fixes related to wireless connectivity issues.   When you see references such as “Fixed an issue where wireless reconnection might fail after resuming normal operation from standby/suspend state” there clearly was a problem in the previous driver version(s).  Note: updates to wireless adapter driver files may require the user to re-enter security information.

Informational:  How to find your IPv4 Wireless Hardware (MAC) Address, option 1
This procedure can be used even if the device is not currently connected to a wireless network. Click the Windows logo at the bottom left corner of the screen, enter cmd in the Search programs and files window then press Enter. A black window with white text appears.  Type ipconfig /all then press Enter.  Scroll to the top of the window then locate the Wireless LAN adapter Wireless Network Connection heading.  The Physical Address is the IPv4 wireless hardware (MAC) address, in the form xx-xx-xx-xx-xx-xx.

Informational:   How to find your IPv4 Wireless Hardware (MAC) Address, option 2
This procedure requires you be connected to a wireless network.   Start button, Control Panel, Network and Sharing Center, Change Adapter Settings.  Verify the Wireless Network Connection adapter shows a wireless network name then double-click the Wireless Network Connection adapter. Under the General tab select Details.  The IPv4 Address is the wireless hardware (MAC) address, in the form xx-xx-xx-xx-xx-xx.

Connect to SU_secure on Windows XP

This part of the article will walk you through connecting to SU_secure on Windows XP.  Due to multiple WiFi networks existing at Seattle University, SU_Secure must be configured manually the first time that your computer connects to it.   

Click here to download this guide in PDF format.

 

Step 1: Add a new wireless network.

  • Click on Wireless Network Connections.  (In the picture below, it is the icon on the far left.)

WiFi XP 1

  • The Wireless Network Connection window will appear.
  • In the lower left corner, click on Change Advanced Settings.

WiFi XP 2

  • Click on the Wireless Networks tab.
  • Under Preferred networks: section, click on the Add... button.

WiFi XP 3

Step 2: Configure the Wireless Network Properties.

  • In the Network name (SSID): field, enter SU_secure.
  • On the Network Authentication: menu, select WPA2.
  • On the Data encryption: menu, select AES.

SU_secure XP 2

  •  Click on the Authentication tab.
  • In the EAP type: menu, select Protected EAP (PEAP).
  • SU_secure XP 3
  • Click on the Properties button.
  • The Protected EAP Properties window will appear.
    • Make sure that the Validate server certificate box is not checked.
    • Make sure that the Enable Fast reconnect box is not checked.
    • Click on the Configure... button for Secured password (EAP-MSCHAP-v2).

SU_secure XP 4

 

  • The EAP MSCHAPv2 Properties window will appear.
    • If you are using a Seattle University OIT-issued laptop, then the "Automatically use my Windows logon name and password..." option should be selected.
    • If you are using a personally owned laptop, then "Automatically use my Windows logon name and password..." should NOT be selected.
     
  • Click the OK button.  
  •   SU_secure XP 1

     

    You can now press the OK button until all of the windows are closed.  Your computer will now be able to connect to the SU_secure network.

     

    (Optional Step):  Sign in with SU credentials from a personal laptop.

    • If your computer is not an OIT issued Seattle University laptop, then you will be prompted to enter a User name, Password, and Login domain the first time, and whenever you change your password. 
      • Enter your SU username.
      • Enter your SU password.
      • Enter the login domain as seattleu.
       

    SU_secure XP 7

      

    Connect to SU_secure on a Mac

    This section of the article will walk you through connecting to the SU_secure wireless network using an Apple computer.

    Click here to download this guide in PDF format.

     

    Step 1: Use your AirPort to connect to SU_secure.

    • Click on the icon for the AirPort.
    • Select SU_secure from the menu.
    •  
      SU_secure Mac OS X 1 

    Step 2: Enter your credentials. 

    • You will be prompted to enter your Seattle University username and password.
    • If connecting from a personally owned laptop, try entering your username as your full email address (i.e., username@seattleu.edu).
    • Make sure that 802.1X is set to Automatic.

    • Check Remember this network.

    • Click OK.

    •  

    SU_secure Mac OS X 2

     

    Step 3: Accept the security certificate.

    • You will be prompted to accept a security certificate.
    • Click Continue to accept the certificate.

    SU_secure Mac OS X 3

    •  Your Mac will now remember the SU_secure network.

    (Optional Step): Click on the AirPort icon and select SU_secure. 

     

    SU_secure Mac OS X 4

    Type in seattleu\username and your password.

     

    Announcements

    RESTORED: SUDDS Reporting Services

    7/29/14 11:50am

    SUDDS reporting services have been restored. Thank you for your patience as we worked to resolve this unexpected issue.

    Upcoming Maintenance

    August monthly maintenance

    OIT will perform Planned Maintenance on all data center systems on the following August dates:

    Friday August 8th, 5:00pm - midnight (complete)

    Friday August 22nd, 6:00pm - midnight

    Telephony, Email, SUOnline, and Canvas LMS will be intermittently unavailable during maintenance.

    Please check back soon for more details.

    System Status

    System is Online There are no current network problems or outages.



    Service Now

    Please click here to login with your SU email address and password.