Wi-Fi Root Certificate Change Information
This KB will help users identify if the new root certificate has been loaded into the client Wi-Fi Profile correctly
Technology Services will be changing the Root Certificate used for the secure communication of Wi-Fi traffic used on a clients phone. The following instructions allow for a client to check if the proper profile has already been ran, or if it is still required to run.
If there is any concern or doubt, there is no harm in running the profile again, the URL is located here http://go.illinois.edu/wifisetup.
IOS/iPhone/iPad
- Open up the IOS devices General Settings App
- Scroll to the bottom and open the VPN and Device Management
- Click on the Configuration profile with University of Illinois in the title, if you have no profile, go to the onboarding URL - http://go.illinois.edu/wifisetup. You can disregard the rest of this instructions as your device will be properly configured
- Click on More Details
- If you see a certificate named ISRG Root X1, your device is setup correctly. If not, please go to the URL onboarding at - http://go.illinois.edu/wifisetup
MACOS
- Open a terminal window (you can do this by utilizing spotlight, search for 'terminal' and press enter, or searching in your Applications Folder).
- Type the command - 'security dump-trust-settings' - and press enter
- If your computer is configured correctly, you will see the below output:
- Number of trusted certs = 5
Cert 0: USERTrust RSA Certification Authority
Number of trust settings : 2
Trust Setting 0:
Policy OID : SSL
Result Type : kSecTrustSettingsResultUnspecified
Trust Setting 1:
Result Type : kSecTrustSettingsResultTrustRoot
Cert 1: ISRG Root X2
Number of trust settings : 2
Trust Setting 0:
Policy OID : SSL
Result Type : kSecTrustSettingsResultUnspecified
Trust Setting 1:
Result Type : kSecTrustSettingsResultTrustRoot
Cert 2: Root YR
Number of trust settings : 2
Trust Setting 0:
Policy OID : SSL
Result Type : kSecTrustSettingsResultUnspecified
Trust Setting 1:
Result Type : kSecTrustSettingsResultTrustRoot
Cert 3: Root YE
Number of trust settings : 2
Trust Setting 0:
Policy OID : SSL
Result Type : kSecTrustSettingsResultUnspecified
Trust Setting 1:
Result Type : kSecTrustSettingsResultTrustRoot
Cert 4: ISRG Root X1
Number of trust settings : 2
Trust Setting 0:
Policy OID : SSL
Result Type : kSecTrustSettingsResultUnspecified
Trust Setting 1:
Result Type : kSecTrustSettingsResultTrustRoot - If not, please go to the URL onboarding at - http://go.illinois.edu/wifisetup.
Windows
- Open your Start Menu and click or find the Settings App and Open it
- Click on "Network and Internet" and then Click on "Wi-Fi"
- Click on the IllinoisNet Profile
- Find the "Advanced Wi-Fi Network Properties" edit button and Click it.
- On the next page you will see a "Settings" Button, Open it.
- Please verify that the Trusted Root Certificates are selected correctly.
- You should see ISRG Root X1 and X2. You should also see ISRG YR and YE lower in the list as well.
- If there is any concern or mismatching information, feel free to rerun the onboarding tool again: http://go.illinois.edu/wifisetup.