University Computer Help Desk

Before You Begin

These instructions are for Windows XP computers that can already access "isunet" using MS-PEAP. If you need to perform a new "isunet" configuration, refer to 1228: Configuring "isunet" wireless on Windows XP using MS-PEAP.

You must have the required Entrust certificates to connect to "isunet." These instructions require you to download and install two Entrust.net secure server certificates. You must also configure your wireless adapter to use the certificate (only one of the two certificates appears in your wireless adapter's PEAP settings).

Symptom

When you attempt to connect to "isunet" you may receive the following error message:

Wireless Network Connection Windows was unable to find a certificate to log you on to the network isunet.

The wireless connection dialog may say, Waiting for network to be ready... with only a Cancel button.

Solution

You must install two new security certificates from Entrust. These instructions involve three main steps:

• Step 1 - Download the new Entrust certificates for Windows XP
• Step 2 - Install the new Entrust certificates
• Step 3 - Configure your wireless profile to use the new Entrust certificate

Detailed instructions for each of these steps is provided below.

Step 1 - Download the New Entrust Certificate for Windows XP

To download the Entrust certificates for Windows XP, do the following:

1. We recommend using a wired network connection on campus, an Internet connection at home, or the "isu-public" wireless network in Milner Library.
2. Download the Entrust Certificate for Windows XP.

Step 2 - Install Two Entrust Certificates for Windows XP

To install the two Entrust certificates for Windows XP, do the following:

1. Double-click on the ZIP file you downloaded. This file is named Entrust Cert for Windows XP.zip.
2. Double-click on the first certificate file inside the ZIP. It is named entrust_2048_ca.cer.
3. Click the Install Certificate... button.
4. Click Next.
5. Select the first option: Automatically select the certificate store based on the type of certificate.
6. Click Next.
7. Click Finish.
8. You will see the message, The import was successful. Click OK.
9. Click OK on the certificate window.
10. Repeat these steps for the second certificate file, entrust_l1b.cer.

Step 3 - Select the Entrust Certificate in your "isunet" Wireless Profile

To select the Entrust certificate in your "isunet" wireless profile, do the following:

1. Click Start > Control Panel.
2. If you see Pick a category at the top of the window, click Switch to Classic View on the left.
3. Double-click Network Connections.
4. Right-click on your wireless network adapter and select Properties.
5. Click Wireless Networks tab.
6. Select your isunet profile under Preferred Networks and click the Properties button.
7. Click the Authentication tab.
8. Under the EAP Type drop-down menu, click the Properties button.
9. Put a check mark next to Validate server certificate.
10. Remove the check mark next to Connect to these servers:.
11. Scroll through the list labeled Trusted Root Certificate Authorities. Put a check mark next to Entrust.net Certification Authority (2048).
12. Click OK three times.
13. Close the Network Connections window and any other windows that might be open.

You may now connect to "isunet."