Wireless authentication changes

Wireless authentication changes

We’re making improvements to our wireless network for better security and user experience. Our current “CSAILPrivate” network uses Kerberos authentication, which can be complex to configure, especially for Apple devices. Additionally, the underlying RADIUS protocol has known security vulnerabilities.

To address these issues, we’re transitioning to a new wireless authentication system provided by Cisco Meraki. This system uses a more secure authentication method and simplifies the connection process. To use this new system, however, will require that everyone set a separate password for connecting to the wireless network. After balancing the pros and cons of the two approaches, we have decided to make the switch, and we are hoping to have the changeover completed this fall.

We understand that setting a new password can be inconvenient. However, once you’ve created your new wireless credentials, you’ll typically only need to enter them once per device.

The new system, temporarily accessible through the “CSAIL Testing” SSID, offers:

• Stronger security: Protects your data and network from unauthorized access.
• Easier setup: Especially for Apple devices: no more “.mobileconfig” files needed.
• The new system will also be more resilient to password changes and resets.

How to Try the New System (Optional)

We encourage you to connect to “CSAIL Testing” soon to familiarize yourself with the process.

Create a wireless password

1. Visit my.csail.mit.edu
2. Go to “My Account”
3. Under “Manage WiFi Password” click “Change” to Set or Change your CSAIL WiFi password.
4. You will be given the option of a randomly generated password.
   • Click the copy button to save to your password manager.
5. Click “save” to submit and save your password
6. If you would rather create your own password, deselect the “use generated password” checkbox.
7. Enter a unique, strong password, and click “save” to submit and save your password
   • Be sure to save in your password manager

Connect your client to “CSAIL Testing”

Prerequisite

• If you’ve previously connected to “CSAILPrivate” on your devices, you’ll need to “forget” the network
• Apple MacOS users: If you’ve previously connected to “CSAILPrivate”, you will need to remove the “.mobileconfig” file
  • System Settings Privacy and Security Profiles Select “CSAILPrivate Wirless” and click the “-” to remove it
• Apple iOS users: If you’ve previously connected to “CSAILPrivate”, you will need to remove the “.mobileconfig” file
  • Settings VPN & Device Management Select “CSAILPrivate Wirless” select “Remove Downloaded Profile”

Connecting

• From your client, select the “CSAIL Testing” network.
• Usermame: Your full CSAIL email address
• Password: Your new wireless password
• Join the network

What to Expect

This fall (specific date to be confirmed), the “CSAIL Testing” network will be retired. The “CSAILPrivate” network will be upgraded to use the new system.

Since this password is unique to your wireless account, when you change your CSAIL Kerberos password, you will not need to change your wireless password and will remain connected.

If you have any questions, need help setting up your device, or have feedback, please contact help@csail.mit.edu