Configure Mac OS X (10.5) to Access the cavalier Wireless Network

[Nov 23, 2009 10:11] Windows Live student email is currently unavailable. ITC is working with Microsoft to develop a solution.

Requirements

  • Mac OS X version 10.5 (Leopard) with all current updates applied.
  • Correct time and date on your computer.
  • AirPort or Airport Extreme wireless network card installed.
  • UVa account and password on Central Mail Service (CMS), ESERVICES, or Blue.unix.
  • Access to a wired network port at the University.
  • Administrator access to your computer.

Configure Mac OS X to Connect to cavalier

Prepare your computer

  1. Connect to the internet via your wired Ethernet connection.
  2. Run Software Update from the Apple menu (the apple icon in the upper left corner of your screen) to make sure your operating system and other system components (e.g., AirPort software) are up-to-date.

Install Your Personal Certificate

  1. Download your Personal Digital Certificate by following the Mac OS X instructions on the personal digital certificates website.
  2. Locate the personal certificate file downloaded to your Download folder in the previous step. The file name begins with your University Computing ID, e.g. "mst3k-cert.p12". Double-click the file icon.
  3. The "Keychain Access" application will open and you will be asked to add the certificate to a Keychain. Make sure you are adding it to the Keychain: login and click "OK".
    Personal Certificate Import Image
  4. You will be prompted to enter a password. Use the same password you used when you completed the web form to obtain the certificate. You need to enter this password only once.
  5. After the import process is complete, you will see that five files have been added to your login Keychain:
    • Your Private Key
    • Your Personal Digital Certificate
    • USHER CA1 v1
    • UVA Standard Assurance USHER
    • UVA USHER PKP CA 1
  6. When asked "Do you want you computer to trust certificates signed by "USHER CA1 v1" from now on?", select Always Trust.
    Graphic depicting correct selection for Trust USHER dialog window.
  7. To complete the process, you will be asked to enter your password for your computer.

Configure the USHER Certificate

With the "Keychain Access" application still open:

  1. In the login keychain, locate and double-click on the USHER CA1 v1 certificate.
  2. Click the Details triangle to collapse its section.
  3. Click the Trust Settings triangle to expand its section.
  4. From the Extensible Authentication (EAP) drop-down, select Always Trust.
    Graphic depicting correct selection of Trust Settings for EAP.
  5. Close the USHER CA1 v1 window.
  6. To continue, enter the administrator information for this computer.
  7. Quit Keychain Access.

Connect to cavalier

Make sure you're in an area covered by the cavalier wireless network. See UVa wireless coverage >>

  1. Disconnect your wired ethernet connection.
  2. Click the AirPort menu bar icon [AirPort Icon in Menu Bar] located at the top of your screen. (If AirPort is off [AirPort Icon in Menu Bar indicating OFF], select Turn AirPort On from the Airport menu, and then click the AirPort icon again.) From the menu, select cavalier.
  3. You will be asked to enter a User Name and Password. Leave these fields empty and accept the defaults, Automatic for the 802.1x field, and "Remember this network" selected. Click OK.
    • NOTE: If you have more than one personal digital certificate in Keychain Access you will need to select the preferred certificate through the 802.1x drop-down menu in this window.
      Graphic depicting correct setting for connection to the cavalier wireless network.
  4. When you connect to cavalier the first time you will need to complete an extra step:
    • In the Confirm Access to Keychain window, when asked for permission to allow the use of your "Private Key" in the Keychain, click Always Allow.
      Confirm Access to Keychain Graphic depicting correct settings.
  5. Open a web browser (e.g. Safari). If you can reach Web sites outside of UVa, registration is complete. If your device is not registered, you will automatically connect to the UVa Network Registration web site. Complete registration and reboot.

Once you are connected, you will maintain an encrypted connection unless you do one of two things:

  • Move out of range of the cavalier wireless network.
  • Turn off your AirPort card.

If you encounter difficulties connecting to the UVa Wireless network, please contact the ITC Help Desk.

© 2009 by the Rector and Visitors of the University of Virginia.

The information contained on the University of Virginia’s Department of Information Technology and Communication (ITC) website is provided as a public service with the understanding that ITC makes no representations or warranties, either expressed or implied, concerning the accuracy, completeness, reliability or suitability of the information, including warrantees of title, non-infringement of copyright or patent rights of others. These pages are expected to represent the University of Virginia community and the State of Virginia in a professional manner in accordance with the University of Virginia’s Computing Policies.