How to Get Connected: Windows 8 WPA2

Install a certificate on your device to connect to SecureMustangWireless.

Configuring the Client

  1. While on the windows 8 start screen, type "Network and Sharing Center". Once the search menu comes up, click the Settings search option. An item labeled Network and Sharing Center should show up in the search results. Click on it.

    open network and sharing

  2. A window titled "Network and Sharing Center" should pop up on the desktop. Under the "Change your networking settings" divider, click Set up a new connection or network.

    set up a new connection

  3. When asked to choose a connection option, select Manually connect to a wireless network and click Next.

    choose a connection option

  4. Enter the following information when prompted:

    • Enter SecureMustangWireless into the Network Name field.
    • Select WPA2-Enterprise as the Security type.
    • Select AES as the Encryption type.
    • Check the Start this connection automatically box.
    • Click Next to continue.

    input network information

  5. A new window will open confirming that you have successfully added SecureMustangWireless as a wireless network. Click on Change connection settings.

    change connection settings

  6. A network properties window should pop up. Under the "Connection" tab, make sure Connect automatically when this network is in range is checked.

    network properties - connection

  7. Under the "Security" tab:

    1. Select WPA2-Enterprise as the Security type.
    2. Select AES as the Encryption type.
    3. Under "Choose a network authentication method", select Microsoft: Protected EAP (PEAP).
    4. Uncheck Remember my credentials for this connections each time I'm logged on.
    5. Click the "Settings" button next to the network authentication dropdown to continue.

    network properties - security

  8. A window titled "Protected EAP Properties" will pop up.
    Ensure Validate Server Certificate is checked.

    Note: Regarding the "Validate server certificate" setting, ITS strongly recommends using this feature, as it helps ensure that no one is masquerading as the Secure Mustang Wireless network. If you receive a "identity of this server cannot be verified" error with this setting checked, do not connect to that wireless network!

    Under the Trusted Root Certification Authorities window, ensure that the Thawte Primary Root CA certificate is checked. If you do not see that certificate listed, you will need to install it. Follow the certificate installation instructions.

    IMPORTANT: You may need to close and reopen the Protected EAP Properties window to see the Thawte Primary Root CA certificate after downloading and installing it. This is done by clicking cancel in the image below and repeating steps 16-18.

    Select Secure Password (EAP-MSCHAP v2) as the Authentication Method.

    Click on the Configure... button next to the drop-down and ensure Automatically use my windows log on name and password (and domain if any) is unchecked, then click OK to continue. Ensure Enable Fast Reconnect is checked and click OK and return to the "Security" tab of the Network Properties window.

    peap properties

    peap properties

  9. Click on the Advanced settings button, then select the first 802.1x settings tab (the one that contains authentication settings).

    Place a check in Specify authentication mode: and then select User authentication in the drop down menu.

    802.1x settings - auth

  10. Select the second 802.11 settings tab (the one that contains roaming settings).

    Ensure Enable Pairwise Master Key (PMK) caching is checked, then click OK and return to the "Manually Connect to a wireless network" window.

    802.11 settings - roaming

  11. Click on the Close button to close the "Manually Connect to a wireless network" window.

    The wireless profile for SecureMustangWireless should now be correctly installed. Try to connect to SecureMustangWireless.

Connecting and Logging into SecureMustangWireless

  1. While on the windows 8 start screen, type "connect to a network". Once the search menu comes up, click the Settings search option. An item labeled Connect to a network should show up in the search results. Click on it.

    connect to a network

  2. The sidebar should pop out. Select SecureMustangWireless and click Connect.

    connect to secure mustang wireless

  3. An authentication box should come up in the sidebar. Enter your Cal Poly Portal username and password as your User Name and Password and then click OK.

    network authentication

    IMPORTANT: If you have installed the Thawte Primary Root CA certificate and still see a certificate error while trying to log on to SecureMustangeWireless, you most likely need to download the Thawte Intermediate SSL CA certificate.

Related Content