🌐Eduroam (Linux)

The instruction was written based on the Ubuntu distribution (with openssl3 and wpa_supplicant 2.10 packages installed).
For other distributions, please proceed accordingly.

In the Ubuntu operating system, you can connect to the eduroam network in two ways:

WPAx Enterprise + PEAP

A quick connection method, but potentially less secure. It may be vulnerable to threats, for example, if someone were to emit a fake eduroam network from their own device.

When selecting the properties of the eduroam network, set the connection as shown in the illustration.

In the fields Anonymous Identity and Username, enter a short login from Moja PG (including the domain pg.edu.pl for employees and doctoral students or student.pg.edu.pl for students).

In the Password field, enter the password from Moja PG.

Open

Finally, click Apply and attempt to connect.

WPAx Enterprise + TLS

A method with sufficient security, but cumbersome during the initial configuration.

1. Download the main PG certificate in PEM format from Main certificate | Intranet CUI.

2. Using the tool https://ca.cui.pg.edu.pl, generate and download a personal certificate - with the default name certyfikat_uzytkownika.p12.

3. Open the terminal (text console window) and in the directory where the downloaded certificate file certyfikat_uzytkownika.p12 is located, execute the command (confirming with the Enter key):

   openssl pkcs12 -in certyfikat_uzytkownika.p12 -out certyfikat_uzytkownika.pem

This command is used to export the certificate to a format accepted (in PEM format) by the Ubuntu operating system.

4. After executing the above command in the console, you will be asked two questions about the password:

   • Enter Import Password - you should enter the password securing the certificate, which is the password from the Moja PG portal,

   • Enter PEM pass phrase - you should come up with, enter, and remember a new personal password that will secure the personal key (this password will soon be needed when configuring the connection to eduroam).

   Below is an approximate example of executing the command:

Open

5. Finally, you need to open the properties of the connection to the eduroam network and set them as shown in the illustration.

   In the Identity field, enter a short login from Moja PG (including the domain pg.edu.pl for employees and doctoral students or student.pg.edu.pl for students).
   In the CA Certificate field, specify the previously downloaded main PG certificate file.
   In the User Certificate field, specify the previously exported personal certificate file (in PEM format).
   In the User Private Key field, specify the previously exported personal certificate file (in PEM format).
   In the User Key Password field, enter the PEM pass phrase password established in point 4 above.

Open

Finally, click Apply and attempt to connect.

Further technical tips

In case the computer has stopped connecting to the network (even though it was previously connected and the personal certificate is still valid), resetting the password in Moja PG to another one may help in practice.