Page tree
Viewable by the world
Skip to end of metadata
Go to start of metadata



On April 29, 2019, the certificate for the LBL server that handles eduroam authentication will expire.  This certificate expires once every 10 years.

Once this certificate expires, you will not be able to use eduroam. You will need to update your eduroam profile if you plan to continue using this service. 

After April 29, 2019, you will not be able to use eduroam until you update your profile.

What do I need to do?

To update your profile you must first remove your existing eduroam profile (if you have one) and then download and install a new profile from cat.eduroam.org.

If you have any issues with the installation or would like some assistance, please contact the IT Help Desk at help@lbl.gov or (510) 486-4357.


What is eduroam?

eduroam (education roaming) is the secure, world-wide roaming access service developed for the international research and education community. eduroam allows researchers, students, and staff from participating institutions to obtain Internet connectivity across campus and when visiting other participating institutions by simply opening their WiFi device. It uses 802.1x* technology.

At Berkeley Lab, eduroam is available throughout many of the buildings on-site and off-site. Just look for "eduroam" as an option for a WiFi network.

What does eduroam do?

  • For the traveler: eduroam provides per-user, per-session encrypted network access for visitors from participating institutions, without the need to gain guest credentials on arrival to an eduroam enabled location. The connectivity is instantaneous and the infrastructure is authenticated by the user. In other words, if you travel to another location that participates in eduroam, you can use your Berkeley Lab account and the local wireless network to gain access to the web.
  • For the institution: eduroam removes the administrative steps required to provision visitors from other educational institutions. Anyone visiting LBL from an institution that participates in eduroam can access the network with their own account through our wireless network without jeopardizing network security.


The eduroam SSID puts users on the "visitor" network as opposed to the "employee" network. Although it requires authentication, there are different access controls in place. For example, you can't access eBuy or Facilities Keyplans on eduroam since it's open to other eduroam-participating institutions.

How can I configure my device with eduroam?

You will need to have a working Berkeley Lab username and password before you start configuring eduroam.

Berkeley Lab employees on travel

Before you start your trip, make sure that your laptop and mobile devices have been set up to work with eduroam. Berkeley Lab-specific instructions to configure devices are here.

Note: if you change your enterprise directory (LDAP) password, you will have to change it on your device as well. Go here for help.

Visitors to Berkeley Lab, who have been set up to use eduroam at their home institution

The SSID for Berkeley Lab's implementation is eduroam.

Here are the general instructions to install eduroam using their Configuration Assistant Tool (CAT) (https://cat.eduroam.org/)

Why can't I connect to eduroam?

If you recently changed your password you will need to delete the eduroam network from your device and re-install eduroam again. Attempting to log in with your new password into the existing eduroam will not work. Instructions are here.

What are other participating institutions?