PKI (Public Key Infrastructure) is a device-specific certificate that can replace strong identification on university staff Univ-laptop when using UNIV VPN (Pulse Secure) or Eduroam wireless networks.

Contents of this instruction:

• Utilising of PKI in VPN connection
• Utilising of PKI in Eduroam connections

Utilising of PKI in VPN connection

NOTE! The VPN client Pulse Secure (=UNIV VPN) will be out of service after January 2023!

After the certificates have been automatically stored on the laptop, the VPN client (UNIV VPN, Pulse Secure) is offering a new connection alternative which is UNIV-VPN.

The connection alternatives:

1. UNIV-VPN: VPN connection to the university network uses the certificate which is installed in the device. You are asked only the user account and the password. The certificate replaces the strong identification in which a one-time passcode would be needed otherwise.
2. Secondary VPN: In addition to the user account and the password, the VPN connection to the university network requires the typing of a one-time passcode for the strong identification. You get the passcode as a text message (SMS) to your mobile phone if you have activated Strong SMS authentication with VPN.

Act this way when opening the VPN connection:

• Choose UNIV-VPN, click Connect and enter your user account and the password.
  • If the login does not operate for some reason, you can choose the
    connection Secondary VPN.
• When you want to finish the connection, click Disconnect at the same position.
• Close the window by clicking Close.

Utilising of PKI in Eduroam connections

You can take advantage of your Univ laptop’s PKI certificate for all Eduroam wireless connections. In practice, your Univ workstation can automatically connect to the available Eduroam network wherever it is available (e.g. other educational institutions).

Install the certificate this way:

• Double click the icon Eduroam WLAN on laptop’s desktop.
• Eduroam Installer will start, click Next.
• Choose the login method Login automatically with Windows domain certificates and then click Next.
• Finish the installation by clicking Finish.

Use PKI this way:

• Once you have enabled the PKI certificate and the setting Login automatically with Windows domain certificates is in use, you will automatically log into Eduroam networks in the future.
• In a problem situation, you can change the login method to username/password based: Tap Ongelmatilanteessa voit vaihtaa kirjautumistavan käyttäjätunnus/salasana –perusteiseksi: Tap Eduroam WLAN icon on the desktop and select Type user name and password manually as the login option.

 

« Back