Posted on 4 May 2020
When you connect to eduroam or the wired network, you do so over a secure connection. This uses a digital certificate (just like online banking and shopping) to ensure your details are kept secret and are only being sent to servers here at the University. The current certificate expires at the end of May and needs to be updated.
This change will affect most devices (laptops, phones, tablets etc) that connect to either eduroam or to the wired network in study bedrooms and study areas (such as those in the Library).
Managed desktops on the wired network and games consoles are not affected by this change.
As you are most likely working remotely at the moment you may be required to update your device on your return to campus.
If you are using eduroam from a remote location, like a NHS hospital, another university, or government building, you may need to update your device to continue using it from Tuesday 19 May.
From 19 May you may be prompted to accept a new certificate when you first attempt to connect your device to the network.
Before continuing first check that the certificate details match those given below. You must only click accept/continue to connect if they match.
The new certificate should have one of the following server thumbprints:
E8 CF 69 40 71 23 C9 98 C7 58 5E 68 B2 92 02 F5 70 90 6F 4C
4D 9B 26 31 0A EF 09 61 CF B1 B0 F5 54 CA 0C 86 D5 1E 6C A9 C7 F5 7E 6D C2 B7 3E A5 5A 39 9E F4
You may need to click Show certificate details or Details to reveal the server thumbprint.
The prompt should refer to radius.york.ac.uk.
Click Show Certificate - the certificate should refer to QuoVadis Root CA 2 G3 and QuoVadis Global SSL ICA G3.
The new certificate prompt should refer to radius.york.ac.uk and QuoVadis Global SSL ICA G3.
Tap More Details - the certificate details should mention to University of York and QuoVadis Limited.
Android won’t prompt you to accept a new certificate.
If your Android device fails to connect then re-configure your device for eduroam.
If the certificate details do not match those shown above, or if the device still fails to connect...
If you have any questions, either before or after the change takes place, please contact IT Support.