Important notes for devices running Android 11
Beginning with Android version 11, it is no longer possible to choose a "do not validate" option in the "CA certificate" dropdown. Even trusted CAs (Certificate Authorities) like the RADIUS server certificate, which used to authenticate eduroam, must be validated by your device.
Remove current eduroam configuration
If you have previously set up your eduroam connection without certificate validation, you'll be unable to connect after you've upgraded to Android 11. To reconnect, you'll need to remove the current configuration for eduroam and manually install a Cardinal Key Root CA certificate. To remove any current configuration for eduroam, follow these steps:
- Open Settings and then access Wi-Fi options.
- Tap and hold eduroam. If the option to "Forget network" appears, then select it and continue.
- If the option to "Forget network" does not appear, you can still continue with the steps below to manually install a Cardinal Key Root CA certificate.
Android 11: Connect to eduroam (optional for Android 9 and 10)
To connect to eduroam, you must manually install a Cardinal Key Root CA certificate on your device (this is a one-time step). To do this, make sure your device is connected to the internet and follow these steps:
- Download the Cardinal Key Root CA certificate (cardinalkey-root.cer) on your device.
- Follow Google's instructions to add a certificate.
- Configure the eduroam settings as follows:
- When prompted to choose the uses for the certificate(s), select both VPN and apps and Wi-Fi.
- When prompted to enter a name for the certificate, use Cardinal Key Root.
