Choose your device
One device, one connection path. You only need your device’s instructions.
Before you start
You need an active university SSO account and its password. Do not enter account details on this page.
In this guide
Connection steps — Digital certificate · alternative
1. Before you start
The alternative EAP-TLS / CBA method uses a dedicated certificate instead of an SSO password for the Wi-Fi session; CBA is not a separate EAP protocol. Check current eligibility, validity and certificate limits in the official portal; these values have not been independently verified. Install the certificate and private key only on your authorized personal device.
2. Obtain a certificate
- Sign in with SSO to Manage and issue certificates ↗.
- Select “Issue new certificate”.
- Choose a protection password for the certificate file.
- Download the PFX/P12 file containing the certificate and private key. The file password is the password you chose when issuing the certificate. It is used when importing the certificate onto your device and is not necessarily the same as your SSO password.
3. Install and connect
Windows 10 / 11
- Double-click the PFX/P12 file, follow the default Certificate Import Wizard and enter the file protection password.
- Leave “Mark this key as exportable” off. Follow the default certificate import steps. If a specific certificate store must be selected, contact IT support for approved instructions.
- Connect to ilam-uni-ap using an already configured EAP-TLS profile; no SSO password is required for the Wi-Fi connection.
Renew the certificate
Before the certificate’s one-year validity period ends, obtain a new certificate from the SSO portal and install it. According to the reported university settings, the existing EAP-TLS profile selects it automatically; otherwise disconnect and reconnect Wi-Fi. Removing the old certificate is unnecessary if the new one is selected.
Android
- Download and open the file for this phone, enter its password and select “Wi-Fi” during import.
- Select ilam-uni-ap and apply the settings below.
- At the first TOFU connection, verify the certificate through a trusted university channel before selecting “Yes”. Do not approve it if uncertain.
| Setting | Value |
|---|---|
| SSID | ilam-uni-ap |
| IP / Gateway / DNS | Automatic / DHCP |
| Auto-connect / Auto-Join | On |
| EAP Method | TLS |
| User Certificate | New certificate for this phone |
| CA Certificate | Trust on first use (TOFU) |
| Domain | Reportedly recorded automatically after first approval |
| Identity | SSO username |
| Anonymous Identity | Leave blank |
| Password | Not required |
| MAC Address | IT confirmation required; keep the current setting |
Renew the certificate
Before the certificate’s one-year validity period ends, obtain a new certificate from the SSO portal and install it. Then select the new certificate in User Certificate. Removing the previous certificate is not required.
Check the connection
- Network connection: check that Wi-Fi settings show a connection to ilam-uni-ap.
- Internet: open a public HTTPS website. Opening an internal university service alone does not confirm internet access.
- Internal service: if you need a university service, test that authorized service separately. Never ignore a certificate warning.
An iPhone/iPad EAP-TLS guide has not been approved.
Switching connection methods
To move from PEAP to EAP-TLS, forget the network, obtain a device-specific certificate and configure TLS. To return to PEAP, forget the network and reconnect with SSO credentials; deleting the certificate is unnecessary.
Certificate troubleshooting
PFX will not download or open
Check that the download is complete and download the file again. If the problem persists, contact IT support.
The certificate file password is rejected or you have forgotten it
Enter the password you chose when issuing the certificate. It is used when importing the certificate onto your device and is not necessarily the same as your SSO password. If you have forgotten it, issue a new certificate with a new password.
Android cannot find the certificate
Import the file again with the Wi-Fi type.
The user certificate has expired
Obtain and install a new certificate; select it explicitly on Android.
A certificate validation error appears
First identify whether the error concerns the user certificate or the server certificate. For a server error or TOFU warning, do not approve; send the error text without secrets to IT support. Reissuing a user certificate does not necessarily resolve a server-certificate error.
The certificate is installed, but the Wi-Fi connection cannot be established using EAP-TLS
Check the TLS method and the selected certificate. If the problem persists, contact IT support; do not weaken connection security.
Old certificate selected after renewal
Android: manually select the new certificate. Windows: disconnect and reconnect. Deleting the old certificate is unnecessary.
Advanced settings and notes
Do not accept an unknown certificate. Before entering your password, obtain and verify the trusted certificate details and server domain with IT; stop if these details are unavailable.
More information: devices, NAC and privacy
Under the reported configuration, the same network name is used in university buildings and dormitories. Authorized access is provided directly after authentication; no captive portal or VPN is required for this connection. User groups include students, faculty, staff, IT specialists, guests and contractors. Under the reported policy there is no device-count limit per SSO account. NAC identifies devices automatically after authentication; no manual MAC registration is needed. Enable automatic connection.
Guests and contractors
The host unit’s representative must submit a request for a temporary SSO account through the administrative automation system. The request must include name, identity reference, employer, host unit, validity dates, phone number and access purpose. IT creates the account and sends credentials to the guest by SMS. Validity follows the requested dates; extension requires a new host request. Do not enter these details on this guide site.
Troubleshooting
Troubleshoot Wi-Fi one step at a time
Network name is not visible
Turn Wi-Fi off and on, and check network coverage at your location. If the problem persists, submit a support request with the building and location.
Incorrect username or password
Enter only your SSO username; do not add a domain or email suffix. Then check your password. Use the recovery link below if needed.
Cannot connect
Check device settings and the official certificate. For Android PEAP, set MAC address type to Phone MAC as specified in the PDF. For other devices, do not change MAC settings without IT confirmation. Forget and reconnect if needed; never ignore a certificate warning.
Connected but no internet
Disconnect and reconnect. Then check that IP and DNS settings are obtained automatically through DHCP, and test the connection again. If the problem persists, submit a support request.
After changing the SSO password
Enter the new password when prompted. If the problem persists, forget the network and reconnect.
Slow or intermittent connection
Try another location and report the building, floor, location and time.
Get help
Support route and verification limits
Contact the IT Center to confirm the correct ticket portal, sign-in method and category. Tickets and telephone calls are answered during office hours.
Sources and review status
Last text review: 3 October 2026
Editorial responsibility: Supplementary guide editorial team · University technical approval: not received; technical owner not designated
Next planned review: 2 November 2026
Experimental EAP-TLS guide (Legacy source; a working original address has not been verified)
A university source link does not establish that all settings and policies are current.
To print, expand the sections you need and use your browser’s Print option. To share, copy this page’s address.