Staff Wi-Fi

Connecting employees to the company network with a certificate: iPhone, Android and Windows

iPhone and iPad setup

To join the company Wi-Fi without typing a password, a certificate is installed on your device. You do this once; after that your phone connects on its own.

Before you start

Setup

Common questions

If I don't type a password, is my connection less secure?

The opposite. A password can be shared; a certificate cannot, because it belongs to your device. Your work password is also no longer stored in Wi-Fi settings.

What if I replace my phone?

Repeat the same setup on the new device. If you are giving up the old device, or you need both at once, tell your administrator; they remove the old device’s access from the panel.

What is installed on my personal phone?

Only a certificate used to join the company Wi-Fi. Your location, photos and apps are not visible, and your device is not placed under management.

Can I remove the profile?

Yes, from Settings > General > VPN & Device Management. Once removed, you can no longer join the company network.

It says "Open this page on the company network".

Your phone is on mobile data or a network outside the company. Join your company Wi-Fi and open the link again.
Open this page on the company network

It says "Profili Safari ile yükleyin" (install the profile with Safari).

It says "Profil bulunamadı veya süresi doldu (15 dk)" (profile not found or expired).

The download step was not done within 15 minutes. Open the setup link again and fill in the form once more.

The setup page shows an error message.

If you see "Incorrect username or password.", tap Try again and type your details again; if you received a temporary password by SMS, use that. If you see "Verification timed out" or "not enabled / not found in the staff list", tell your administrator. All messages and what they mean: Inviting Staff.

Android setup

To join the company Wi-Fi without typing a password, a certificate is installed on your device. On Android this has two stages: install the certificate, then fill in a few fields in the Wi-Fi settings.

Before you start

1. Download the certificate

2. Install the certificate

  1. Tap the downloaded file in the notification shade or the Downloads list. The name looks like useroam-personel.p12 and it is only a few KB.
    The .p12 file in the Downloads list
    If you cannot reach the file, the same thing works from Settings > Security > Encryption & credentials > Install a certificate; there, choose Wi-Fi certificate. Do not choose "VPN and apps": the Wi-Fi screen cannot see certificates installed there.
  2. An Extract certificate dialog opens. Enter the certificate password shown on the setup page and tap OK.
    Extract certificate password dialog
  3. In the Name the certificate dialog, Credential use must be set to Wi-Fi. Tap OK.
    Name the certificate, credential use set to Wi-Fi
  4. Your phone may also ask for its screen lock. That is your own PIN or pattern.

3. Join the network

  1. Tap the company network in your Wi-Fi list. The dialog that opens shows only Identity and Password; that is not enough for a certificate login. Tap Advanced options.
    Wi-Fi dialog with the Advanced options button
  2. Fill in the fields in the expanded form.
    Advanced Wi-Fi form: EAP method, CA certificate, user certificate, identity

The fields to fill in:

EAP methodTLS
CA certificateUse system certificates
User certificateselect the certificate you installed
Identityyour username
Domainthe value shown next to Domain name on the setup page (usually panel.useroam.com)

Then tap Connect.

About the CA certificate: the steps on the setup page may say to select "the certificate you installed as both the CA certificate and the User certificate". In CA certificate choose Use system certificates; select the certificate you installed only in User certificate. The file you installed contains no CA certificate, so it does not appear in the CA list.

The two places people get stuck

Identity: enter your work username. Use exactly the value shown to you on the setup page.

Domain: do not leave it empty. If it is blank the phone reports "Couldn't connect".

Common questions

The phone asked for a password during installation. Which one?

There are two. The certificate password shown on screen opens the file. The screen lock your phone asks for is your own PIN or pattern; Android protects stored certificates with it.

What is installed on my personal phone?

Only a certificate used to join the company Wi-Fi. Your device is not placed under management and its contents are not accessible.

It says "Open this page on the company network".

Your phone is on mobile data or a network outside the company. Join your company Wi-Fi and open the link again.
Open this page on the company network

It says "Profil bulunamadı veya süresi doldu (15 dk)" (profile not found or expired).

The download step was not done within 15 minutes. Open the setup link again and fill in the form once more.

The setup page shows an error message.

If you see "Incorrect username or password.", tap Try again and type your details again; if you received a temporary password by SMS, use that. If you see "Verification timed out" or "not enabled / not found in the staff list", tell your administrator. All messages and what they mean: Inviting Staff.

Windows setup

To join the company Wi-Fi without typing a password, a certificate is installed on your computer.

Note: the Windows flow has not yet been verified end to end on a real machine. If a step fails, tell your administrator; that is our gap, not your mistake.

Before you start

1. Download the certificate

2. Install the certificate

  1. Double-click the downloaded file. The Certificate Import Wizard opens.
  2. Choose Current User as the store location and click Next.
  3. Enter the certificate password shown on screen.
  4. Click Next and Finish through the remaining steps.

3. Join the network

  1. Select the company network from the network icon in the taskbar.
  2. If Windows asks for a certificate, choose the one you installed.
  3. If it asks you to verify the server, use the name shown next to Domain name on the setup page (usually panel.useroam.com).

If you cannot connect

Windows's own windows (Certificate Import Wizard, network selection) differ between Windows versions, so this guide has no pictures of them. The network must be configured to use Smart card or other certificate as its authentication method. If you don't see that option, or the connection still fails, contact your administrator.

Common questions

It says "Open this page on the company network".

Your phone is on mobile data or a network outside the company. Join your company Wi-Fi and open the link again.
Open this page on the company network

It says "Profil bulunamadı veya süresi doldu (15 dk)" (profile not found or expired).

The download step was not done within 15 minutes. Open the setup link again and fill in the form once more.

The setup page shows an error message.

If you see "Incorrect username or password.", tap Try again and type your details again; if you received a temporary password by SMS, use that. If you see "Verification timed out" or "not enabled / not found in the staff list", tell your administrator. All messages and what they mean: Inviting Staff.