Wireless - XpressConnect Configuration Tips
This article provides some additional information on XpressConnect caveats that you should be aware of before attempting to use the configuration wizard.
- MacOS devices that have an old XpressConnect profile installed will fail to connect when the certificate change is detected. The only work around is to remove the old XpressConnect profile. Therefore it is not advisable to use XpressConnect profiles on Mac devices when you first register them. The manual setup is much simpler on MacOS devices. Once you have successfully established a connection to the network, you should try to install the new XpressConnect profile to ensure the installation of all the required Intermediate CA Certificates that your machine needs to be aware of.
- MacOS devices that have manually setup the secure wireless connection and do not have any XpressConnect profiles installed will be able to cope better with the certificate change with minimal intervention by users. However, users will get an error and will fail to connect initially, but are able to workaround this error by selecting the secure network from the networks list to force it to reconnect a second time. In some cases, you may need to delete the wireless network from your networks list and setup the connection which is not complicated.
- Windows machines will get a certificate error message whether or not they have the XpressConnect profile installed. The error message does allow users to click connect to circumvent that error message and proceed. It is worth using XpressConnect so that support staff or users don't have to manually go through all the settings on windows machines.
- On iOS devices (iPhone, iPads, etc) you don’t really need to use the XpressConnect profile, but you can use it to install the required Intermediate CA certificates. The benefit is that your device will know to trust the uchicago-secure network every time it roams and needs to re-authenticate.
- On Android devices you will need to navigate different options to setup the connection and in some cases you will need to manually tell it to trust the intermediate CA certificates. To avoid this hassle, you may want to use the new XpressConnect profile to configure your device on the secure network including the correct CA certificate trust settings.