|
Dartmouth has three wireless networks that provide connectivity to the
Internet, with only two of these providing direct access to Dartmouth
network-based resources. If you are unsure which network to choose, see
Which SSID Should I Use?
Dartmouth Public: In order to connect to the
Dartmouth Public network, just select it from the list of
available networks.
Dartmouth Library Public: In order to
connect to the Dartmouth Library Public network, just select
it from the list of available networks.
Dartmouth Secure: In order to connect to the
Dartmouth Secure network, there are several steps you need to
follow. These steps vary depending on the version of the Macintosh Operating
System on your computer. To check the version of the operating system, go to
the Apple menu in the upper left-hand corner of your screen
and click About this Mac. The screen that appears will list a
version number similar to 10.4.11 or 10.5.2. Use this number to
determine which method of configuring your computer for Dartmouth
Secure you should follow. Do not try to run the automated script on
Mac OS X 10.5.
Note: You MUST use Safari for this configuration
process.
Automated Script (Mac OS X 10.4 or Earlier)
- Install the Dartmouth Root
Certificate on your computer. (Click Dartmouth CertAuth 1
CA.)
- Install a
private certificate on your computer or
get an eToken that has your private certificate on it.
Note: If you are using an eToken, make sure the
Aladdin eToken Runtime Environment has been installed and the eToken is
inserted in a USB port on your computer before proceeding.
- Download the Dartmouth
Secure.internetconnect profile to your desktop, then double-click the
downloaded file.
- On the Menu bar, click the Airport icon
and select Dartmouth Secure.
Step-by-step Instructions (Mac OS X 10.4)
- Open the Safari Web browser and go to https://collegeca.dartmouth.edu/DownloadCerts.jsp
to download the Dartmouth Root Certificate.
- Click the first link, Dartmouth CertAuth1 CA (Dartmouth Root
CA).
- A Downloads window will appear with an entry called
DartmouthCA.cer. Double-click on the paper
icon to the left of the text.
- The Keychain Access program will open and prompt you for a location to
store the Root Certificate. Select X509Anchors from the
drop-down menu, then click OK.
- You may receive several prompts for your computer password during this
process. You may also receive a prompt about trust settings for the Root
Certificate. Select Always Trust.
- Within the Keychain Access program (the icon on the Dock looks like a set
of keys), go to the X509Anchors keychain. If you do not
see this listed, click on the arrow button in the lower-left
corner of the Keychain Access window.
- Once you click on System, you should see a certificate on
the right that says Dartmouth CertAuth1. Double-click on it,
then click on the arrow by Trust. At the top of the list,
you will see an entry for When Using This Certificate. Select
Always Trust from the drop-down menu.
- Now you must install your Private Certificate or get an eToken that has
your private certificate on it. This is an encrypted form of your DND name and
password. If you do not have an eToken, to install a certificate on
your hard drive, go to https://collegeca.dartmouth.edu/SimpleRequest.jsp
and enter your DND name and password. Select
1024 for the key size, click Submit,
then Install the certificate.
- In the Downloads window, you will see another certificate,
Cert2Install.der. Double-click on the paper
icon to the left of the text.
- Install this certificate into the login keychain.
- Go to the login keychain and find the certificate with your name and
double-click on it. Click on the arrow by
Trust. At the top of the list, you will see an entry for
When Using This Certificate. Select Always
Trust from the drop-down menu.
- Note: If you are using an eToken, make sure the
Aladdin eToken Runtime Environment has been installed and the eToken is
inserted in a USB port on your computer before proceeding.
- With the Finder as the active application, click Go, then
Applications, then double-click Internet
Connect.
- From the Menu bar, click File, then
New 802.1x Connection.
- In the Configuration box, select Edit
Configurations.
- In the Description field, enter Dartmouth
Secure.
- In the User Name field, enter
your DND (BlitzMail) name
(e.g., John A. Doe).
- Leave the Password field blank.
- In the Wireless Network field, select Dartmouth
Secure as the wireless network.
- In the Authentication field, make sure
TLS is checked and that all other items listed are
not checked.
- Click TLS to highlight it, then click the
Configure button and select your personal
certificate, then click OK.
- Click Connect to exit the 802.1x configuration window. If
prompted to Unlock your keychain, enter your eToken
password.
- A Verify Certificate window will appear. Click Show
Certificate, then put a checkmark in the Always trust these
certificates box. Click Continue.
- The system will now try and connect to Dartmouth Secure.
Select Always Allow if prompted for permission.
- If you receive a trust warning regarding the Server certificate, click
OK.
- If successful, the status should say Connected via
TLS.
You can now connect to Dartmouth Secure as your default
wireless network whenever you are on campus. It is important to note that there
is currently an issue with Mac OS X 10.4.11 and higher connecting to
Dartmouth Secure immediately upon turning on your computer.
When you first turn on your computer (or restart it), in the
Menu bar, you will need to select Dartmouth
Public from the Airport icon list, then select
Dartmouth Secure. This problem does not exist if you are just
waking your computer from sleep mode. Apple has been notified of this issue; we
will post information as soon as it is resolved.
Step-by-step Instructions (Mac OS X 10.5)
- Open the Safari Web browser and go to https://collegeca.dartmouth.edu/DownloadCerts.jsp
to download the Dartmouth Root Certificate.
- Click on the first link, Dartmouth CertAuth1 CA (Dartmouth Root
CA).
- A Downloads window will appear with an entry called
DartmouthCA.cer. Double-click on the paper
icon to the left of the text.
- The Keychain Access program will open and prompt you for a location to
store the Root Certificate. Select System from the drop-down
menu and click OK.
- You may receive several prompts for your computer password during this
process. You may also receive a prompt about trust settings for the Root
Certificate. Select Always Trust.
- Within the Keychain Access program (the icon on the Dock looks like a set
of keys), go to the System keychain. If you do not see this listed, click on
the arrow button in the lower-left corner of the Keychain
Access window.
- Once you click System, you should see a certificate on the
right that says Dartmouth CertAuth1. Double-click on it and
click on the arrow by Trust. At the top of
the list, you will see an entry for When Using This
Certificate. Select Always Trust from the drop-down
menu.
- Now you must install your Private Certificate. This is an encrypted form of
your DND name and password. To install it, go to https://collegeca.dartmouth.edu/SimpleRequest.jsp
and enter your DND name and password. Select
1024 for the key size, click Submit, then
Install the certificate.
- In the Downloads window, you will see another certificate,
Cert2Install.der. Double-click on the paper
icon to the left of the text.
- Install this certificate into the login keychain.
- Go to the login keychain and find the certificate with your name and
double-click on it. Click the arrow by Trust.
At the top of the list, you will see an entry for When Using This
Certificate. Select Always Trust from the drop-down
menu.
- Click on the Airport icon and select Open Network
Preferences.
- Turn Airport off, then click the Advanced
button.
- On the Airport tab, drag Dartmouth Secure
to the top of the Preferred Networks list.
- Click Apply, then click Advanced.
- Select the 802.1x tab.
- Change Domain to User.
(Note: If you cannot change to the Domain
to User, go to the Preferred
Networks and delete Dartmouth Secure, then go back to
the 802.1x tab and change the Domain to
User.)
- Under Configuration, add Dartmouth Secure
(click the + sign if it doesn't exist).
- Enter your name in the User Name field;
leave the Password field blank. The User name entered must be
exactly the same as your Common Name attribute in the
Subject Name of your Dartmouth certificate, including periods,
spaces, and middle initials.
- Select Dartmouth Secure as the Wireless network.
- Under Authentication, select TLS by
checking the box next to the TLS entry. All other boxes should
not be checked.
- Highlight TLS, then click
Configure.
- The DartmouthCertAuth 1 should display; highlight your personal
certificate, then click Choose.
- Click OK, then click Apply.
- Turn the Airport back on and connect to Dartmouth Secure.
- The following message is displayed: eapolclient wants to sign using
key "Key from collegeca.dartmouth.edu" in your keychain - do you want to
allow?. Click Always Allow.
(Note: If this does not appear, go to your
Login keychain and double-click the private
key associated with your Dartmouth certificate. Select the
Access Control tab and ensure that
eapolclient is one of the applications that is allowed to
access your private key.)
You can now connect to Dartmouth Secure as your default
wireless network whenever you are on campus. It is important to note that there
is currently an issue with Mac OS X 10.4.11 and higher connecting to
Dartmouth Secure immediately upon turning on your computer.
When you first turn on your computer (or restart it), in the
Menu bar, you will need to select Dartmouth
Public from the Airport icon list, then select
Dartmouth Secure. This problem does not exist if you are just
waking your computer from sleep mode. Apple has been notified of this issue; we
will post information as soon as it is resolved.
For more information related to this topic, see:
|
