FAQ - Wi-Fi at RWTH Aachen

The login data are to be used only for one device. In case the user name and/or the password have been forgotten or compromised, new login data can be generated via the eduroam Devicemanager. For this reason saving of the login data is not necessary.

Your RWTH eduroam login credentials cannot be changed at will, because we wish to prevent you from using these to login to other IT-services at the university.

Because of widespread and easily accessible information about how eduroam log-in works, an "Evil-Twin" attack is possible. This means that an attacker (hacker) can set up an "evil" access point, which pretends to offer you access to eduroam (twin), but in reality only wants to get hold of your eduroam login credentials. If the attack succeeds and if you use your eduroam credentials (Login name and Password) for other RWTH IT-services (e.g. RWTHonline), then all your accounts get compromised (the attacker can login to those). Mobile devices, e.g. smartphones, are especially endangered as they are constantly searching for familiar Wi-Fi connections and connect to them without asking for the users permission.

By enforcing distinct login credentials for each used eduroam device we try to mitigate the harm done in case of a compromised eduroam account.

In case your eduroam login data have been compromised or the Login name and/or Password have been forgotten, new login credentials for the afflicted device can be generated via the eduroam Devicemanager. The compromised (or forgotten) device should be explicitly deleted from your eduroam Devicemanager.

1. Install a profile for eduroam. There are manuals for doing this on iOS devices and macOS devices.
2. If the Wi-Fi login dialog appears after your device has briefly lost connection, cancel the connection attempt without re-entering your login credentials. In many cases, your device will automatically reconnect to the network after a few seconds.
3. If you share your Wi-Fi credentials with other devices via the Apple iCloud Keychain, all devices will share the same identifier. Please delete all eduroam credentials and create a new one that you will use for all Apple devices. We generally recommend not to share any login credentials with third parties.

Apple keychain prevents from connecting to eduroam when using multiple eduroam identifiers.

If you have several Apple devices, you need to delete the eduroam login credentials of all devices in the eduroam devicemanager.

Then create a new set of eduroam login credentials and connect all Apple devices to eduroam using this set of credentials.

You can reset the saved login information on your device by selecting the "i" symbol next to the network and selecting "Forget network". The network can then be selected in the Wi-Fi menu, and you will be asked for your login information.

Should it not be possible to forget the network, you can delete your eduroam profile on your iOS device instead. This profile could contain incorrect login information.

You can delete your profile by navigating to "Settings" → "General" → "VPN & Device Management". Select the eduroam profile and then select "Remove profile". After the profile was removed, you can once again enter your login information when connecting to the network or install a new profile.

The same process can be used for macOS devices. Here you must search for "Profiles" in your system settings and delete any eduroam profiles saved there.

If a pop-up “Windows security” appears when you log in, please delete the WLAN profile and try again.

1. Open the Wi-Fi Settings on your device.
2. Click Manage known networks.
3. Click Forget next to eduroam.

Your WLAN-Profil is now deleted. You now need to set up eduroam once again.