Summary
This article provides steps to remove expired TLS certificates for USNH eduroam. This can sometimes solve the problem when a device keeps saying the connection is not trusted, or the user is continually prompted to select a certificate.
Environment
This can happen on any device configured to connect to USNH eduroam through the WiFi TLS (transport layer security) Certificate process at https://wifi.usnh.edu.
Symptoms
- User needs to manually connect to eduroam when changing locations on campus
- Auto-connect/Auto-join is selected for the network, yet it does not auto connect
- Device will not connect to eduroam
- Device prompts user to select certificate every time user tries to connect to eduroam, yet none selected allows them to connect
- Device connects to eduroam with no Internet
- Device keeps saying the wireless connection is not trusted
Resolution
General troubleshooting steps
Remove any stored certificates and/or saved USNH wireless networks, then reconnect to eduroam with the <username>@usnh.edu login or re-install the TLS certificates.
Step 1 - Remove stored USNH Wireless certificates and/or saved USNH Wireless networks.
Step 2 - Reconnect to eduroam and sign in with <username>@usnh.edu and password when prompted.
Step 3 - If Step 2 does not solve the problem, browse to https://wifi.usnh.edu. Click on Start Over at the top, then go through process to re-install the USNH WiFi TLS certificates.
Detailed instructions for:
Result
Your device is connected to eduroam at USNH.
MacOS
Instructions
Step 1 - Select the Apple icon in the upper left of the screen
Step 2 - Select system preferences (OS X) or system settings (OS 12+)
Step 3 - Search for "Profiles" then click on the word: Profiles
Step 4 - Look for profile(s) called eduroam user and/or UNH-Secure CPPM. You may find more than one of these profiles.
Step 5 - Remove each profile you find in Step 4 by highlighting each profile name then clicking the minus button (-) below it in the same column. Repeat for each profile you found in Step 4 above.
Step 6 - Browse to Network in system preferences/system settings and highlight the WiFi connection
Step 7 - Click the Advanced button
Step 8 - Look under Preferred Networks for USNH networks, such as: eduroam, UNH-Open, KSC-Open, PSU-Open, etc.
Step 9 - Remove each network you find in Step 8 by highlighting the network name then clicking the minus button (-) below it in the same column. Repeat for each network you found in Step 8 above.
Step 10 - When the USNH networks are all removed, click OK, then Apply!
Step 11 - Select eduroam from the wireless connections drop-down and sign in with username@usnh.edu and password when prompted.
Outcome
Your device is connected to eduroam at USNH.
Back to list
iOS
Instructions
Step 1 - Open Settings then go to General
Step 2 - Tap on VPN & Device Management or Profiles & Device Management, near the bottom.
Step 3 - Tap on each USNH campus profile listed under Configuration Profile. For each profile, tap Remove Profile and confirm. Repeat for each profile listed.
- If you do not have any USNH campus profiles listed, skip this step.
Step 4 - Go to Wi-Fi settings
Step 5 - Forget all the USNH networks by tapping the ( i ) icon next to the network name. Tap Forget This Network, if available, then tap Forget to confirm.
Step 6 - Select eduroam from the Wi-Fi connections list and sign in with username@usnh.edu and password when prompted.
Outcome
Your device is connected to eduroam at USNH.
Back to list
Windows
Instructions
Step 1 - Open Settings > Network & Internet. Select Wi-Fi on the left, then the Manage known networks link.
Step 2 - Select each USNH network (eduroam, UNH-Open, KSC-Open, PSU-Open, etc.) and click on Forget. Repeat until no USNH campus networks appear in the list.
Once that is complete, remove all stored USNH certificates of the form - username@cpuser.unh.edu :
Step 3 - Search on the computer for "Internet Options" and Open the Internet Options control panel app. The Internet Properties box opens with multiple tabs.
Step 4 - Click on the Content tab then click the Certificates button.
Step 5 - All available stored certificates will be listed there. If necessary, widen the Issued To column to see the full Certificate name.
Step 6 - Select each certificate of the form username@cpuser.unh.edu and click Remove.
NOTE: This will interrupt your existing connection to eduroam if you are connected using one of the deleted certificates.
Step 7 - Select eduroam from the Wi-Fi connections list and sign in with username@usnh.edu and password when prompted.
Alternative method for technicians [requires computer admin permissions]
- Step 3 - Search on the computer for "Certificate" and Open the Manage user certificates control panel app [or open the Run command, type certmgr.msc , and press Enter]. The certmgr - [Certificates] box opens with multiple folders.
- Step 4 - Certificates are stored in the Personal > Certificates folder. If necessary, widen the Issued To column to see the full Certificate name.
- Step 5 - Select each certificate of the form username@cpuser.unh.edu, then right-click and select Delete or click the red X in the toolbar.
- NOTE: This will interrupt your existing connection to eduroam if you are connected using one of the deleted certificates.
- Step 6 - Select eduroam from the Wi-Fi connections list and sign in with username@usnh.edu and password when prompted.
- (Optional) Step 7 - Reconnect to <Campus>-Open, browse to https://wifi.usnh.edu and click "Start Over" at the top, then follow the onscreen instructions to reconfigure the device to eduroam using TLS certificates.
Outcome
Your device is connected to eduroam at USNH.
Back to list
Cause
There are multiple certificates installed on the machine, which can happen if someone re-runs the configuration process through wifi.usnh.edu.
The USNH Cloudpath applet downloaded from wifi.usnh.edu installs and configures certificates to connect to eduroam. Windows and Mac OS can both store multiple Cloudpath certificates which can lead to connection problems. The device is unable to determine the best certificate and instead may prompt the user to select a certificate.
When this issue occurs, IT recommends removing all Cloudpath personal certificates from the device and re-running the Cloudpath applet. Only one valid certificate issued to <username>@cpuser.unh.edu is required to connect to eduroam. Alternatively, sign into eduroam with username@usnh.edu and password instead.
Further Readings
Connecting to the USNH Wireless Network using Laptops, Tablets, or Phones
eduroam: USNH Wireless Cloudpath Certificate Configuration
eduroam: USNH Wireless Manual Certificate Configuration
How to forget a Wi-Fi network on iPhone, iPad, or Mac- Apple Support article
Install or remove configuration profiles on iPhone- Apple Support article
Install or remove configuration profiles on iPad - Apple Support article
https://wifi.usnh.edu - Click "Start Over" at the top, then follow the onscreen instructions to reconfigure the device to eduroam using TLS certificates.
Need additional help?
Visit the Technology Help Desk Support page to locate your local campus contact information or to submit an online technology support request. For password issues you must call or visit the Help Desk in person.