Body
This article provides guidance for UNC affiliates who need to grant guest access to eduroam.
Update: The secure guest platform has been updated so that it will be easier for all parties to use. Sponsors will generate a username and password pair for guest users. When the guests arrive on campus, they must select the ‘eduroam’ network from available wireless networks on their device, click ‘connect‘, and enter the username and password pairs. This greatly simplifies the process as the long onboarding process previously used is no longer available.
Secure Guest is intended for guests that need full and pervasive access to the UNC network. If a guest was previously configured for eduroam at another institution, they will need to clear their profile settings for eduroam to use the new username and password pairs. The ITS Service Desk can help if the user is unsure of how to do this. Call 919-962-HELP (4357) or file a Service Request.
Note: Sponsors are limited to 30 active accounts at one time.
| |
UNC-Guest |
UNC-Guest PSK |
eduroam Secure Guest Access |
| Pervasive across campus wireless? |
No |
No |
Yes |
| Secure and encrypted? |
No |
Yes |
Yes |
| Full network access? |
No |
No |
Yes |
| Requires client configuration? |
No |
Yes |
Yes |
| Requites prior client registration? |
No |
No |
Yes |
Prerequisites
In order to create unique usernames and accounts for eduroam Secure Guest access, you must be a registered sponsor. You must first contact the ITS Service Desk (chat or phone and ask for a ticket to be created) or submit a Service Request. Please ask for the ticket to be sent to ITS-Networking with your Onyen requesting sponsor access. Only after access is granted will you have the power to generate access credentials.
Instructions for Individual User Account Creation
- The sponsor must click the Sponsor Access for Account Creation link on the wifi.unc.edu page.
- The sponsor must authenticate via SSO.
- Once logged in, the user will be on the base account creation page which will look like this:
In the lower section, the sponsor will see a Create button. This is where INDIVIDUAL accounts can be generated (bulk accounts discussed below). This is what sponsors will want to use most of the time. This is adequate for a small number of account generations.
- Usernames and passwords should both be auto-generated
- First and last name are required
- Enter account information in the appropriate area and select the Notify via… option to receive account information via text or email
- The Account Duration Template determines the length of time that the credentials are valid.
- Generate the accounts the day of the visit or immediately preceding the visit. If you generate these credentials too far in advance, they may be expired by the time the user arrives on campus.
- When completed entering the information, select Create
- The status of the creation should show on the next screen (see the green messages above the username)
Very important: The user will receive an email with a username that ends with ‘@securew2.unc.edu’. It will look something like ‘620194@securew2.unc.edu’. If they do not input the entire username, it WILL NOT WORK. Below is an example of an email that will go to the user if you selected that option:
- After generation, if you would like to see the details of the account creation, or desire to print the account information, please select the box next to the desired username, and select Print from below.
Instructions for Bulk User Account Creation
From time to time, you may need to generate many accounts for a large group (up to 30). The easiest way to do this is with the Bulk Generation option. Before creating and distributing too many IDs, please remember that you are responsible for the security and proper use of these generations. Any misuse may result in a revocation of access.
- The sponsor must click the Sponsor Access for Account Creation link on the wifi.unc.edu page.
- The sponsor must authenticate via SSO.
- Once logged in, the user will be on the base account creation page which will look like this:
- On the left-hand side of the page, click Create Bulk Guest Accounts
- Specify the number of accounts required. You will then be asked to enter a prefix.
- The prefix is part of the username that will be created. For example, if you entered a prefix of unc, and wanted to generate 5 accounts, it would create something like unc1, unc2, unc3…. If you create a long prefix it will mean a lot more typing for your guests.
- Select an Account Duration Template to indicate how much time you would like this active.These accounts will start to age from the moment you create them. If you select a 3 day template and deliver the username and password pair to the guest a week later, the account will be expired.
- Once you submit the request, you will be back on the main page, and you should see accounts that look like the following:
- Bulk accounts are ideally handed out via a piece of paper. Click the checkbox on the upper left to select all the accounts, and then click Print in the lower bar. We suggest you select the option to Print each guest on a separate page.
