Skip to Navigation | Skip to Content

"nyu" Network Configuration

search the site

did you know?

  • ITS encourages all community members with eligible computers to switch to the nyu network. Nonetheless, the NYU-ROAM2 and NYU-ROAM3 networks will remain operational for the foreseeable future, easing this transition.
  • You should be sure to secure your computer before connecting to NYURoam.
  • If you need help after following the setup instructions on this website, you can attend one of ITS' free NYURoam Wireless Workshops for hands-on help. To register, visit the ITS Classes pages.

The nyu wireless network provides one convenient method of access to the NYURoam network for all laptop computers that support WPA or WPA2 (described in more detail below), and offers a variety of enhancements:

  • Windows computer owners will no longer need to use a VPN client to authenticate and encrypt their wireless data.
  • The nyu network supports both the IEEE WPA and the IEEE WPA2 (802.11i) security standards. (Note that WPA2 provides the most secure data encryption available; if your computer supports WPA2 you are encouraged to use it.)
  • Windows owners will enjoy the benefit of a "one-time sign-on" (until it's time to change the password you use with your NetID, when you'll be prompted once to sign in with the new password). Whenever you are in range of the nyu network, your Windows computer will automatically sign you in (unless you configure it do otherwise).
  • Apple computer owners with AirPort Extreme wireless cards who make the switch to the nyu network will benefit from the enhanced security it offers.

For more information about the nyu network, see the Spring/Summer 2007 issue of Connect Magazine.

To begin, select your computer's operating system:


Windows 7 Instructions

The following instructions assume you will be using the Windows wireless configuration utility.

  1. Open the wireless network connection window. Click Start -> Control Panel -> Network and Sharing Center. (You can also click Start -> Control Panel -> Network and Internet -> Network and Sharing Center or right-click on the wireless icon in your system tray and select Network and Sharing Center.)
  2. Select Manage wireless networks.
  3. Select Add. If you are asked to How do you want to add a network?, select Manually create a network profile.
  4. In the following window fill in:
    • Network name: nyu
    • Security type: WPA2-Enterprise
    • Encryption type: AES
    • Security Key/Passphrase: leave blank.
    • Check the boxes next to Start this connection automatically and Connect even if the network is not broadcasting.
  5. Click Change Connection Settings.
  6. Uncheck the option to Connect to a more preferred network if available. Check Connect automatically when this network is in range and Connect even if the network is not broadcasting its name.
  7. Select the Security Tab. Next to Microsoft Protected EAP (PEAP) click Settings.
  8. A new window titled Protected EAP properties will open.
  9. Enable the option to Validate server certificate.
  10. Under Trusted Root Certification Authorities, check Class 3 Public Primary Certification Authority.
  11. Under Select Authentication Method, select Secured Password (EPA-MSCHAP v2).
  12. Click the Configure button.

  13. Uncheck the option to Automatically use my Windows logon name password (and domain if any).
  14. Click OK to dismiss each of the open windows.
  15. A balloon will appear near the system tray that reads Additional information is required to connect to nyu.

    Click the balloon and you will be prompted for your NetID and password. Leave blank the field for Logon domain.
  16. Once it successfully validates your NetID and password, another balloon will appear near your system tray alerting you that Additional information is required to connect to nyu. Click that balloon, then click OK to accept the certificate in the Validate Server Certificate window.
  17. After a few moments, you will be connected to the nyu wireless network!

Windows Vista Instructions

The following instructions assume you will be using the Windows wireless configuration utility.

  1. Open the wireless network connection window. Click Start -> Control Panel -> Network & Internet -> Connect to a Network. (You can also right-click on the Wireless icon in your system tray and select Connect to a Network.)
  2. Select Set up a connection or network.
  3. Select Manually connect to a wireless network. If you are asked to "Choose a wireless adapter", select Wireless Network Connection, then click Next.
  4. In the following window fill in:
    • Network name: nyu
    • Security type: WPA2-Enterprise
    • Encryption type: AES
    • Security Key/Passphrase: leave blank.
  5. Click to Change Connection Settings.
  6. Uncheck the option to Connect to a more preferred network if available. Enable Start this connection automatically.
  7. Select the Security Tab. Next to "Protected EAP (PEAP)" click Settings.
  8. A new window titled Protected EAP properties will open.
  9. Enable the option to Validate server certificate.
  10. Under Trusted Root Certification Authorities, check Class 3 Public Primary Certification Authority.
  11. Under "Select Authentication Method", select Secured Password (EPA_MSCHAP v2).
  12. Click the Configure button.

  13. Uncheck the option to Automatically use my Windows logon name password (and domain if any).
  14. Click OK to dismiss each of the open windows.
  15. A balloon will appear near the system tray that reads, Additional information is required to connect to nyu.

    Click the balloon and you will be prompted for your NetID and password. Leave blank the field for Logon domain.
  16. Once it successfully validates your NetID and password, another balloon will appear near your system tray alerting you that Additional information is required to connect to nyu. Click that balloon, then click OK to accept the certificate in the Validate Server Certificate window.
  17. After a few moments, you will be connected to the nyu wireless network!

Windows XP Instructions

Step 1: Configure Your Wireless Client
Step 2: Authenticate & Connect

Step 1. Configure Your Wireless Client

The following instructions are based on the Microsoft Windows Wireless Zero Configuration service—the wireless client that is provided by the Windows operating system. During this configuration process, you will determine if your system supports the WPA or WPA2 (IEEE 802.11i) WiFi standards that are required for use of the nyu network. (Clients with computers running Windows 2000 should use NYU-ROAM3 instead.)

  1. Open the Windows Start menu, select "Connect To," then choose "Show all connections."
  2. Among the network interfaces that appear, right-click on the "Wireless Network Connection" entry and select "Properties" from the menu that opens.
  3. In the Wireless Network Connection Properties window that opens, click the Wireless Networks tab at the top.
  4. Ensure that the Use Windows to configure my wireless network settings is selected. Next, in the Preferred networks panel, click the Add button.
  5. In the Wireless network properties window that opens, enter nyu (lower case) in the Network name (SSID) field.


    If you've updated your Windows XP operating system to Service Pack 3, make sure that the Connect even if this network is not broadcasting option is Enabled.

  6. Open the Network Authentication menu to view the different network authentication mechanisms your computers supports. (The figure below shows a computer that supports both the WPA and WPA2 protocols.)

    • If WPA2 is available, select it. "AES" will automatically appear in the "Data encryption" field.
    • If WPA2 is not available, select WPA. "TKIP" will appear in the "Data encryption" field.
    • If neither WPA2 or WPA is included in the menu, see this NYURoam Help page about WPA/WPA2 support before proceeding.
  7. Click the Authentication tab at the top of the Wireless network properties window.
  8. Set EAP type field to Protected EAP (PEAP).

  9. Make sure that the Authenticate as computer when computer information is available is NOT selected.
  10. Click the Properties button under EAP type.
  11. In the Protected EAP Properties window that opens:
    1. Make sure that Validate server certificate is selected.
    2. In the Trusted Root Certification Authorities window, locate and check the box next to Class 3 Public Primary Certification Authority.
    3. Make sure that Select Authentication Method is set to Secured password (EAP-MSCHAP v2).
    4. Click the checkbox next to Enable Fast Reconnect to select it.
    5. Click the Configure... button next to Select Authentication Method.
  12. In the EAP MSCHAPv2 Properties window that opens, uncheck/deselect the Automatically use my Windows logon name and password (and domain if any) option, then click OK.
  13. Finally, click OK in the Protected EAP Properties, Wireless network properties, and Wireless Network Connection Properties windows to close them.

Step 2. Authenticate & Connect

To connect to nyu for the first time:

  1. Make sure you are in a supported NYURoam location.
  2. Your computer will pop up a balloon in the lower right of the screen that reads Click here to select a certificate or other credentials for connection to the network nyu. Click the balloon.
  3. In the Enter Credentials window that opens, enter your NYU NetID and password in the User name and Password fields. Leave the Logon domain field empty. Click OK.
  4. Your computer will pop up a balloon in the lower right of the screen that reads Click here to process your logon information for the network nyu. Click the balloon.
  5. A Validate Server Certificate window opens. Here, you will be accepting the security certificate that ensures that your future connections to nyu/NYURoam are trusted and that your computer is not connecting to a rogue wireless device seeking to impersonate NYURoam. Click View Server Certificate.
  6. In the Certificate window that opens, verify that the certificate was issued to rad.nyu.edu and that the valid date range is current. Click OK. (Note: When the certificate expires, or if your computer somehow "loses" the certificate, you will have to view and accept a new certificate in order to continue using the nyu wireless network.)
  7. If the certificate information is valid, click OK in the Validate Server Certificate window that is still open. (If the information is not valid, make sure you are in a supported NYURoam location or contact the ITS Client Services Center at 212-998-3333.)
  8. Congratulations, the initial sign-on process is now complete! Your Windows computer will now look for and connect to the nyu wireless network of NYURoam whenever your computer is active and in a supported access location. You will not need to login with your NetID/password until it is time to change your NYU password, at which time you will be prompted to log in again.

Safety Tips While on the Internet

Make sure that you have installed the latest software updates for your operating system, and that it is free from virus or spyware. To assist you with computer security, ITS provides copies of Symantec AntiVirus and Lavasoft Ad-Aware in the Ask ITS area of NYUHome.) For more security tips, see the ITS Security website.


Macintosh OS X Instructions

Note: Apple's new Snow Leopard operating system comes with a built-in VPN client. For instructions on configuring it to work with NYU-NET, click here.

  1. Click on the AirPort icon, located at the top right corner of your screen. In the pull down menu that opens, make sure that AirPort is turned on. (If it is not on, select Turn AirPort On.) Next, select Other...
  2. In the Closed Network window that opens:
    • In the Network Name field, enter: nyu
      (This entry is case sensitive. Be sure to enter nyu in lowercase.)
    • From the Wireless Security menu, select WPA2 Enterprise. If your Apple computer is not using an AirPort Extreme wireless card, the WPA2 Enterprise option may not appear. In this case, select WPA Enterprise.
    • Enter your NetID and password in the User Name and Password fields.
    • Set 802.1x Configuration to: Automatic
    • Click OK to authenticate.
  3. Because this is your first time connecting to nyu, a Verify Certificate window will open telling you that the certificate is not trusted. Here, you will be accepting the security certificate that ensures that your future connections to nyu/NYURoam are "trusted" and that your computer is not connecting to a rogue wireless device seeking to impersonate NYURoam. Click Show Certificate.
  4. In the window that opens, verify that the certificate is issued to rad.nyu.edu and that it is scheduled to expire in early 2011. If the certificate information is valid, click (enable) the checkbox next to Always trust these certificates (located under the lock icon in the upper left portion of the window). (Note that you will need to repeat this process when the certificate expires in 2011.) If the information is not valid, make sure you are in a supported NYURoam location or contact the ITS Client Services Center at 212-998-3333. Next, click Continue.
  5. At this point, if you are in a supported NYURoam wireless location, your computer will connect to the service and your Airport icon in the upper right hand corner of your Mac's screen will display your connection signal.
  6. Your computer will automatically connect to nyu when within range of a supported NYURoam location in the future if you have not restarted your computer or connected to another wireless network since you last connected to nyu. Otherwise, repeat steps 1 and 2 above to reconnect.

Page last reviewed: August 31, 2010