Accessibility statement

Forthcoming changes when connecting to the network

Posted on 4 May 2020

On Tuesday 19 May at 8am, as part of our commitment to maintain network security, we are making a change to the way your devices securely connect to the network.

Why are we doing this?

When you connect to eduroam or the wired network, you do so over a secure connection. This uses a digital certificate (just like online banking and shopping) to ensure your details are kept secret and are only being sent to servers here at the University. The current certificate expires at the end of May and needs to be updated.

Will I be affected?

This change will affect most devices (laptops, phones, tablets etc) that connect to either eduroam or to the wired network in study bedrooms and study areas (such as those in the Library).

Managed desktops on the wired network and games consoles are not affected by this change.

As you are most likely working remotely at the moment you may be required to update your device on your return to campus.

If you are using eduroam from a remote location, like a NHS hospital, another university, or government building, you may need to update your device to continue using it from Tuesday 19 May.

What do I need to do?

From 19 May you may be prompted to accept a new certificate when you first attempt to connect your device to the network.

Before continuing first check that the certificate details match those given below. You must only click accept/continue to connect if they match.

Windows

The new certificate should have one of the following server thumbprints:

E8 CF 69 40 71 23 C9 98 C7 58 5E 68 B2 92 02 F5 70 90 6F 4C

or

4D 9B 26 31 0A EF 09 61 CF B1 B0 F5 54 CA 0C 86 D5 1E 6C A9 C7 F5 7E 6D C2 B7 3E A5 5A 39 9E F4

 

You may need to click Show certificate details or Details to reveal the server thumbprint.

A screenshot of the prompt in Windows 10 - select Show certificate details to reveal the server thumbprint.

A screenshot of the prompt in Windows 10 - displaying the server thumbprint.

Mac

The prompt should refer to radius.york.ac.uk.

Click Show Certificate - the certificate should refer to QuoVadis Root CA 2 G3 and QuoVadis Global SSL ICA G3.

A screenshot of the Verify Certificate prompt on Mac devices - select Show Certificate to reveal additional information.

A screenshot of the Verify Certificate prompt on Mac devices - displaying additional information about the certificate.

iOS (iPhone and iPad)

The new certificate prompt should refer to radius.york.ac.uk and QuoVadis Global SSL ICA G3.

Tap More Details - the certificate details should mention to University of York and QuoVadis Limited.

A screenshot of the prompt on iOS devices - select More Details to reveal additional information.

A screenshot of the prompt on iOS devices - displaying More Details.

 

Android

Android won’t prompt you to accept a new certificate.

If your Android device fails to connect then re-configure your device for eduroam.

Linux

Linux won’t prompt you to accept a new certificate. 

If your Linux computer fails to connect then re-configure your device for eduroam or the wired network.

What if I can't connect?

If the certificate details do not match those shown above, or if the device still fails to connect...

  • University managed devices: If you can, try connecting to the University wired network first. Keep the laptop connected to the wired network and it should automatically update in the background within two hours to accept the new certificate. If you're still unable to connect then please contact IT Support for assistance.
  • Unmanaged and personal devices: You should follow our guidance to reconfigure the device for eduroam or the wired network using our automatic setup tool or manual setup guides. If you still can’t connect please contact IT Support for assistance.

If you have any questions, either before or after the change takes place, please contact IT Support.