Blog | G5 Cyber Security

School Wifi: Certificate Authentication

G5 Cyber Security

TL;DR

Your school wifi requires a certificate to connect. This guide shows you how to install it on your device (Windows, macOS, Android, and iOS) so you can get online.

Installing the Certificate

  1. Get the Certificate File: Your school IT department will provide this. It’s usually a file with a .cer or .pem extension. They might email it to you, have it on a website, or give you a link to download it.

Windows

  1. Double-click the certificate file (.cer): This opens the Certificate Import Wizard.
  2. Store Location: Choose “Local Machine” if prompted, otherwise skip this step.
  3. Certificate Store: Select “Place all certificates in the following store”. Click “Browse…” and choose “Trusted Root Certification Authorities”. Click OK.
  4. Finish: Click Finish to complete the import. You may be asked for administrator permission.
  5. Restart your computer: This is important! The changes won’t take effect until you restart.

macOS

  1. Double-click the certificate file (.cer): Keychain Access will open.
  2. Keychain: Choose the “System” keychain (important!).
  3. Trust Settings: Double-click the imported certificate in Keychain Access. Expand the “Trust” section.
  4. When using this certificate: Change this to “Always Trust”. Close the window and enter your macOS password when prompted.
  5. Restart your computer: Restarting is recommended, but sometimes not required.

Android

  1. Download the certificate file (.cer): Save it to your phone’s storage.
  2. Settings > Security > Encryption & credentials: The exact path may vary slightly depending on your Android version and manufacturer (e.g., Samsung, Google Pixel). Look for options like “Install a certificate” or “Trusted Credentials”.
  3. User certificates: Select this option.
  4. Install from storage: Choose the downloaded .cer file. You’ll be prompted to give the certificate a name (e.g., School Wifi Certificate).
  5. Confirm: Android will ask you to set a screen lock PIN or password if you don’t already have one. This is required for security reasons.

iOS (iPhone/iPad)

  1. Email the certificate file (.cer): The easiest way is to email it to yourself.
  2. Open the email on your iPhone/iPad: Tap the .cer attachment.
  3. Install Profile: A screen will appear saying “Profile Downloaded”. Tap “Install” in the top-right corner. You may be asked for your passcode.
  4. Trust Certificate: After installation, go to Settings > General > VPN & MDM (or just General > About > Certificate Trust Settings on newer iOS versions). Find the installed certificate and tap it.
  5. Enable Full Trust: Toggle the switch to enable full trust for the certificate.

Troubleshooting

Exit mobile version