You are located in service: Wi-Fi at RWTH Aachen

eduroam for Linux and Ubuntu

eduroam for Linux and Ubuntu

guide

This page describes how to connect your Linux or Ubuntu device to eduroam.

 
Before you configure your device, you must generate login credentials.

There are 3 methods to connect your device to eduroam:


EAP-PWD method

The screenshots in this guide were made with Ubuntu 24.04.1.

Step 1
Click on the network icon to switch on the WLAN.

Step 2
Select eduroam from the list of available networks.

Step 3
Under "Authentication", select PWD.

Screenshot of the " Authentication required by Wi-Fi network" pop-up window. The Authentication drop-down menu is located between Wi-Fi Security and Anonymous Identity.

Step 4
Enter your eduroam login credentials under "Username" and "Password".

Step 5
Click Connect.

Screenshot of the pop-up window with “PWD” in the drop-down menu. Instead of “Anonymous identity”, you will now find user name and password under Authentication. The user name ends with @rwth.edufi.de.

Your device is now connected to eduroam.

Manual configuration using EAP-PWD

You can also configure eduroam manually via EAP-PWD method.

Step 1
Create a configuration file under /etc/wpa_supplicant/wpa_supplicant.conf

Step 2
Copy the following settings in the file. Under "Identity" and "Password" enter your eduroam login credentials.

network={
    ssid="eduroam"
    key_mgmt=WPA-EAP
    eap=PWD
    identity="EGM_USERNAME@rwth.edufi.de"
    password="CLEAR_TEXT_PASSWORD"
}
 
Please note
It is not possible to use a certificate with the EAP-PWD method. If you want to use eduroam with a certificate, please use the EAP-PEAP method.

Manual configuration using EAP-PEAP

You can also configure eduroam manually via EAP-PEAP method.

Please note:
You will need an internet connection for this configuration. If you are currently at RWTH, you can use RWTH-guests.

Step 1
Download the security certificate under Certificate chain GÉANT/TCS.

Step 2
Create a configuration file under /etc/wpa_supplicant/wpa_supplicant.conf

Step 3
Copy the following settings to the file.

  • Under "ca_cert", enter the name of the security certificate.
  • Under "Identity" and "Password", enter your eduroam login credentials.
network={
    ssid="eduroam"
    key_mgmt=WPA-EAP
    eap=PEAP
    ca_cert="/etc/ssl/certs/Current_ROOT_CERT.pem"
    phase2="auth=MSCHAPV2"
    identity="EGM_USERNAME@rwth.edufi.de"  
    domain_suffix_match="radius.rz.rwth-aachen.de"      # the option is only available for newer versions of wpa-supplicant,
                                                        # should match to the Radius-Realm or Radius-Server
    subject_match="radius.rz.rwth-aachen.de"            # for older versions is weaker than domain_suffix_match
                                                        # should match to the Radius-Realm or Radius-Server
    anonymous_identity="anonymous@rwth.edufi.de"    
    password="CLEAR_TEXT_PASSWORD"
 

 

Additional Information

last changed on 06/10/2025

How did this content help you?

Creative Commons Lizenzvertrag
This work is licensed under a Creative Commons Attribution - Share Alike 3.0 Germany License