On this page, you will find information about connecting to eduroam.
Browse to CSIM page on 1x-config and download the installer that corresponds to your operating system.
When asked for a username, enter your CSIM username (your username must have
@cs.ait.ac.th at the end) and CSIM password. If you don't use
@cs.ait.ac.th, the connection will not be authenticated.
You can also use the QR-code for quick access.
There is no automated installer for Android, so you will have to configure eduroam network manually.
eduroamfor Microsoft Windows 7
The solution below has been tested with Windows 7. The graphical interface may vary but the procedure is the same.
|1.||Open the Network and Sharing Center in the Control Panel and click on Manage wireless networks.|
|2.||Click Add to create a new network.
Choose Manually create a network profile.
In the Network name, enter
|3.||Once the window Sucessfully added eduroam is up, click on Change connection settings.
In the tab Security, click on Advanced settings.
Check the box Specify authentication mode.
|4.||Click on Settings
Make sure that the box Validate server certificate is checked.
Uncheck the box Automatically use my Windows logon name and password (and domain if any).
Close all the windoWs that were open during the configuration of eduroam, click OK or Close.
|5.||Select the WiFi network eduroam and click Connect.|
|6.||Enter your CSIM username (your username must have
|7.||When you get the message saying that the Credentials provided by the server could not be validated, click on Details.
This message arises because Windows 7 does not containts the Certificate Root used by Let's Encrypt.
|8.||Check that the the details are as follow (it is very important that you confirm that the details are correct, else you could be sending your password to an untrusted server):
You are not connected to
|2.||In the form for configuring
- Anonymous identity:
- Click on No CA certificate is required.
- Username: enter your CSIM username followed by
- Password: use your CSIM password.
- Click on Connect.
Your connection to
|When you select eduroam WiFi connection on your smartphone, you must enter your CSIM username (with
Note that your password is always sent on encrypted connection, the Anonymous identity protects only your username
Click on Anvanced options and use
The other options need no change.
Anytime and anywhere the network
This profile may work on iPhones.
|1.||Download the CSIM
While you could do the configuration manually, using the existing profile, you are sure all the correct information are provided; this include the anonymous identity as decribe in the paragraph about what is anonymous identity below.
|2.||Double click on the file you have downloaded, this will start installing CSIM
|3.||The profile has not been signed or certfied, but it is valid.
Click Continue to turst the profile.
|4.||At this stage, you must provide the account and password you will be using with
Make sure you use
If you install this profice on a system with several users, leave the username and password empty; each user will have to enter his credentials when he connects to
|5.||To save the profile in your computer, you must enter the password of the root user.|
|6.||The profile is installed and look like the example provided.|
|8.||The first time you connect to
Click on Show Certificate to the details of the certificate you are about to install.
|9.||It should show:
- DST Root CA X3
- Let's Encrypt Certificate
Click on Continue.
|10.||You need to enter the password of your root user to save the certificate.
You are now connected to
When you authenticate with eduroam, your credentials, that is your username and your password, must be sent by your computer to a server at CSIM.
Your password is always encrypted, so it is not a problem.
But your username is not. The system needs to know the part
cs.ait.ac.th in order to roam the authentication to CSIM server. If the system can see the
cs.ait.ac.th part, it can also see your username. This is not a threat as big as knowing your password, but that could allow phishing, social engeeniring and open the gate to some attacks. To mitigate this risk, an anonymous identity can be used while negociating to roaming to CSIM server. Once this roaming is established, an encrypted tunnel is opened and your real username is sent encryoted.
This page describes 802.1x and EAP and how it applies to eduroam in greater details.