Staff Wi-Fi

• iPhone and iPad setup
• Android setup
• Windows setup

iPhone and iPad setup

To join the company Wi-Fi without typing a password, a certificate is installed on your device. You do this once; after that your phone connects on its own.

Before you start

• You need the setup link from your administrator. It may also arrive by SMS.
• The link does not expire. Once you start, finish the profile download step within 15 minutes; if it lapses, just fill the form again.
• You will enter your work username and password once.

Setup

1. Open the link in Safari. Chrome and other browsers cannot install profiles.
2. Enter your username and password, then tap Install. This can take half a minute; don't close the page.
   
3. Safari asks whether “panel.useroam.com” may download a configuration profile. Tap Allow. Without it the profile never downloads and the setup stops there.
   
4. Open Settings; the Profile Downloaded row appears at the top. If you cannot see it, look under Settings > General > VPN & Device Management, in the Downloaded Profile section.
   
5. Tap the profile, then tap Install at the top right. The card shows Signed by: panel.useroam.com — the profile is signed by Useroam, which is why you do not get an “Unverified” warning.
   
6. Your phone asks for its own screen lock (PIN, pattern or passcode). That is your device passcode, not your work password.
7. When it finishes, pick the company network from the Wi-Fi list. Nothing else to enter.

Common questions

If I don't type a password, is my connection less secure?

The opposite. A password can be shared; a certificate cannot, because it belongs to your device. Your work password is also no longer stored in Wi-Fi settings.

What if I replace my phone?

Repeat the same setup on the new device. If you are giving up the old device, or you need both at once, tell your administrator; they remove the old device’s access from the panel.

What is installed on my personal phone?

Only a certificate used to join the company Wi-Fi. Your location, photos and apps are not visible, and your device is not placed under management.

Can I remove the profile?

Yes, from Settings > General > VPN & Device Management. Once removed, you can no longer join the company network.

Android setup

To join the company Wi-Fi without typing a password, a certificate is installed on your device. On Android this has two stages: install the certificate, then fill in a few fields in the Wi-Fi settings.

Before you start

• You need the setup link from your administrator. It may also arrive by SMS.
• The link does not expire. Once you start, finish the certificate download step within 15 minutes; if it lapses, fill the form again.
• Menu names vary slightly between phone brands.

1. Download the certificate

1. Open the link and enter your work username and password.
   
2. Once you are verified, a Download certificate button appears; tap it.
3. A certificate password appears on the same screen. You will need it in the next step, so keep the page open. The screen also shows the values for the Identity and Domain fields.
   

2. Install the certificate

1. Tap the downloaded file — from the notification shade or the Downloads list. The name looks like useroam_personel1.p12 and it is only a few KB.
   
   If you cannot reach the file, the same thing works from Settings > Security > Encryption & credentials > Install a certificate; there, choose Wi-Fi certificate. Do not choose "VPN and apps": the Wi-Fi screen cannot see certificates installed there.
2. An Extract certificate dialog opens. Enter the certificate password shown on the setup page and tap OK.
   
3. In the Name the certificate dialog, Credential use must be set to Wi-Fi. Tap OK.
   
4. Your phone may also ask for its screen lock. That is your own PIN or pattern.

3. Join the network

1. Tap the company network in your Wi-Fi list. The dialog that opens shows only Identity and Password; that is not enough for a certificate login. Tap Advanced options.
   
2. Fill in the fields in the expanded form.
   

The fields to fill in:

EAP method	TLS
CA certificate	Use system certificates
User certificate	select the certificate you installed
Identity	your username
Domain	the server name your administrator gave you

Then tap Connect.

The two places people get stuck

Identity: enter your work username. Use exactly the value shown to you on the setup page.

Domain: do not leave it empty. If it is blank the phone reports "Couldn't connect".

Common questions

The phone asked for a password during installation. Which one?

There are two. The certificate password shown on screen opens the file. The screen lock your phone asks for is your own PIN or pattern; Android protects stored certificates with it.

What is installed on my personal phone?

Only a certificate used to join the company Wi-Fi. Your device is not placed under management and its contents are not accessible.

Windows setup

To join the company Wi-Fi without typing a password, a certificate is installed on your computer.

Note: the Windows flow has not yet been verified end to end on a real machine. If a step fails, tell your administrator; that is our gap, not your mistake.

Before you start

• You need the setup link from your administrator.
• The link does not expire. Once you start, finish the certificate download step within 15 minutes.
• This guide covers wireless connections. If your computer is connected by cable, ask your administrator; wired access needs separate configuration.

1. Download the certificate

1. Open the link and enter your work username and password.
2. Click Download certificate.
3. A certificate password is shown on screen; you will need it next.

2. Install the certificate

1. Double-click the downloaded file. The Certificate Import Wizard opens.
2. Choose Current User as the store location and click Next.
3. Enter the certificate password shown on screen.
4. Click Next and Finish through the remaining steps.

3. Join the network

1. Select the company network from the network icon in the taskbar.
2. If Windows asks for a certificate, choose the one you installed.
3. If it asks you to verify the server, enter the server name your administrator gave you.

If you cannot connect

The network must be configured to use Smart card or other certificate as its authentication method. If you don't see that option, or the connection still fails, contact your administrator.