Eduroam Trustless CA
Find and install your institution's EAP certificates directly.
ECMWF
Below are the Certificate Authority (CA) certificates required for ECMWF. Install these on your device to securely connect to their eduroam network.
Frequently Asked Questions
Installing the ECMWF CA certificate is a crucial step in securing your connection to the eduroam network. Depending on your operating system, the process differs slightly:
- Android: Download the PEM certificate above. Go to your Wi-Fi settings, add a new network (SSID:
eduroam), set EAP method to PEAP or TTLS, and select the downloaded certificate under the "CA certificate" dropdown. - Windows: Download the PEM certificate and double-click to install it into your Trusted Root Certification Authorities store. Connect to the eduroam network using your institution credentials.
- Apple iOS/macOS: Use the "Generate & Download iOS Profile" button above to download the `.mobileconfig` file. Open your Settings app, tap "Profile Downloaded", and follow the prompts to install and trust the profile.
Connecting to a public or university Wi-Fi network like eduroam without verifying the authentication server leaves your device vulnerable to Evil Twin attacks. In an Evil Twin attack, a malicious actor broadcasts a fake Wi-Fi network named "eduroam" to steal your username and password.
By downloading and strictly trusting the exact CA certificate provided by ECMWF, your device cryptographically guarantees it is securely communicating with your university's genuine RADIUS authentication servers before ever transmitting your credentials.
eduroam (education roaming) is an international roaming service for users in research, higher education, and further education. It provides researchers, teachers, and students secure, easy access to internet connectivity across thousands of locations in over 100 countries worldwide. If your home institution is ECMWF, you can use your standard institutional email and password to connect to eduroam at any participating campus globally.