eduroam

RNP main initiative dedicated to the mobility issue, eduroam (education roaming) is a service developed for the international education and research community that offers wireless internet access without the need of multiple logins and passwords, in a safe, fast and simple way. Launched in Brazil in 2012, it has wide international coverage and gathers institutions of over 60 countries, uniting many users to exchange experiences and knowledge.

Through a high-speed Wi-Fi network, students, researchers, teachers and other employees of the registered institutions may connect to the internet inside their campi and in any location of the world provided there are access points. They need to have the eduroam configured on their computer, cellphone or tablet to detect the wireless network automatically, ensuring convenience and a high quality experience to the user.

International agreements

Brazil has a leading position regarding eduroam in the Europe Latin America Collaborative e-Infrastucture for Research Activities (ELCIRA) project, managed by the Latin American Advanced Networks Cooperation (Cooperação Latino-Americana de Redes Avançadas - RedCLARA) with funding from the European Community. The goal is to support the execution of collaborative projects between researchers from Latin America and Europe. [FBS2] 

See here the eduroam map in the world.

How it works

The basic principle behind eduroam is the user authentication, made by its home institution (identification/authentication provider), and the authorization for the wireless network resources use, given by the visited institution (access provider). In addition to secure authentication, the service has as benefits its integration to the Federated Academic Community (Comunidade Acadêmica Federada - CAFe).

Watch the video lectures bellow, to know more details about its functioning (in Portuguese):

How to subscribe

To request the eduroam membership, the institution must be a Federated Academic Community (Comunidade Acadêmica Federada - CAFe) identity provider and has a Wi-Fi network infrastructure, complying with the minimum requirements criteria. The membership process has the following steps: sending formal document, with the designation of the identity provider to atendimento@eduroam.org.br, accordance with the Use Policy and the Term of Membership signing.

Client institutions

  • Bahian School of Medicine and Public Health (in Portuguese, EBMSP);
  • Brazilian Center for Research in Energy and Materials (in Portuguese, CNPEM);
  • Brazilian Center for Research in Physics (in Portuguese, CBPF);
  • Brazilian Computer Society (in Portuguese, SBC);
  • Brazilian Institute for Information in Science and Technology (in Portuguese, Ibict);
  • "Celso Suckow da Fonseca" Federal Center for Technological Education (in Portuguese, Cefet/RJ);
  • Federal Center of Technological Education of Minas Gerais (in Portuguese, Cefet-MG);
  • Federal Fluminense University (in Portuguese, UFF);
  • Federal Institute of Education, Science and Technology Baiano (in Portuguese, IFBaiano);
  • Federal Institute of Education, Science and Technology Catarinense (in Portuguese, IFC);
  • Federal Institute of Education, Science and Technology Farroupilha (in Portuguese, IFFarroupilha);
  • Federal Institute of Education, Science and Technology Fluminense (in Portuguese, IFF);
  • Federal Institute of Education, Science and Technology Goiano (in Portuguese, IFGoiano);
  • Federal Institute of Education, Science and Technology North of Minas Gerais (in Portuguese, IFNMG);
  • Federal Institute of Education, Science and Technology Sul-rio-grandense (in Portuguese, IFSUL);
  • Federal Institute of Education, Science and Technology of Amapá (in Portuguese, Ifap);
  • Federal Institute of Education, Science and Technology of Brasilia (in Portuguese, IFB);
  • Federal Institute of Education, Science and Technology of Ceará (in Portuguese, IFCE);
  • Federal Institute of Education, Science and Technology of Espírito Santo (in Portuguese, Ifes);
  • Federal Institute of Education, Science and Technology of Goiás (in Portuguese, IFG);
  • Federal Institute of Education, Science and Technology of Pará (in Portuguese, IFPA);
  • Federal Institute of Education, Science and Technology of Paraíba (in Portuguese, IFPB);
  • Federal Institute of Education, Science and Technology of Piauí (in Portuguese, IFPI);
  • Federal Institute of Education, Science and Technology of Rondônia (in Portuguese, IFRO);
  • Federal Institute of Education, Science and Technology of Rio de Janeiro (in Portuguese, IFRJ);
  • Federal Institute of Education, Science and Technology of Rio Grande do Norte (in Portuguese, IFRN);
  • Federal Institute of Education, Science and Technology of Rio Grande do Sul (in Portuguese, IFRS);
  • Federal Institute of Education, Science and Technology of Santa Catarina (in Portuguese, IFSC);
  • Federal Institute of Education, Science and Technology of South East of Minas (in Portuguese, IFSudesteMG);
  • Federal Institute of Education, Science and Technology of South of Minas (in Portuguese, IFSuldeminas);
  • Federal Institute of Education, Science and Technology of Tocantins (in Portuguese, IFTO);
  • Federal Rural University of Amazonia (in Portuguese, UFRA);
  • Federal Rural University of Pernambuco (in Portuguese, UFRPE);
  • Federal University of ABC (in Portuguese, UFABC);
  • Federal University of Acre (in Portuguese, UFAC);
  • Federal University of Alagoas (in Portuguese, UFAL);
  • Federal University of Amapá (in Portuguese, Unifap);
  • Federal University of Bahia (in Portuguese, UFBA);
  • Federal University of Bahia Reconcavo (in Portuguese, UFRB);
  • Federal University of Cariri (in Portuguese, UFCA);
  • Federal University of Ceará (in Portuguese, UFC);
  • Federal University of Espirito Santo (in Portuguese, UFES);
  • Federal University of Goiás (in Portuguese, UFG);
  • Federal University of Health Sciences of Porto Alegre (in Portuguese, UFCSPA);
  • Federal University of Itajubá (in Portuguese, Unifei);
  • Federal University of Juiz de Fora (in Portuguese, UFJF);
  • Federal University of Maranhão (in Portuguese, UFMA);
  • Federal University of Mato Grosso do Sul (in Portuguese, UFMS);
  • Federal University of Minas Gerais (in Portuguese, UFMG);
  • Federal University of Ouro Preto (in Portuguese, Ufop);
  • Federal University of Pará (in Portuguese, UFPA);
  • Federal University of Pernambuco (in Portuguese, UFPE);
  • Federal University of Rio Grande (in Portuguese, Furg);
  • Federal University of Rio Grande do Norte (in Portuguese, UFRN);
  • Federal University of Rio Grande do Sul (in Portuguese, UFRGS);
  • Federal University of Rondônia (in Portuguese, Unir);
  • Federal University of Santa Catarina (in Portuguese, UFSC);
  • Federal University of Santa Maria (in Portuguese, UFSM);
  • Federal University of São Carlos (in Portuguese, UFSCar);
  • Federal University of Sergipe (in Portuguese, UFS);
  • Federal University of Technology - Paraná (in Portuguese, UTFPR);
  • Federal University of the São Francisco Valley (in Portuguese, UNIVASF);
  • Federal University of Viçosa (in Portuguese, UFV);
  • Foundation University of Vale do Itajaí (in Portuguese, Univali);
  • Higher Education Personnel Improvement Coordination (in Portuguese, Capes);
  • Institute of Energy and Nuclear Research (in Portuguese, Ipen);
  • "Julio de Mesquita Filho" State University of São Paulo (in Portuguese, Unesp);
  • Municipal University of São Caetano do Sul (in Portuguese, USCS);
  • Museum of Astronomy and Related Sciences (in Portuguese, Mast);
  • National Institute of Pure and Applied Mathematics (in Portuguese, Impa);
  • National Laboratory for Scientific Computing (in Portuguese, LNCC);
  • National Network of Education and Research (in Portuguese, RNP);
  • National Observatory (in Portuguese, ON);
  • National Statistical Sciences School (in Portuguese, Ence);
  • Pontifical Catholic University of Minas Gerais (in Portuguese, PUC Minas);
  • Pontifical Catholic University of Rio Grande do Sul (in Portuguese, PUC-RS);
  • Pontifical Catholic University of São Paulo (in Portuguese, PUC-SP);
  • Porto Alegre Clinical Hospital (in Portuguese, HCPA);
  • Porto Alegre Prefecture (in Portuguese, Procempa);
  • Santa Catarina Teaching and Engineering Foundation (in Portuguese, FEESC);
  • State University of Campinas (in Portuguese, Unicamp);
  • State University of Paraíba (in Portuguese, UEPB);
  • State University of Ponta Grossa (in Portuguese, UEPG);
  • State University of Santa Catarina (in Portuguese, Udesc);
  • University of Brasilia (in Portuguese, UNB);
  • University of Caxias do Sul (in Portuguese, UCS);
  • University of Passo Fundo (in Portuguese, UPF);
  • University of Santa Cruz do Sul (in Portuguese, Unisc);
  • University of São Paulo (in Portuguese, USP);
  • University of Sorocaba (in Portuguese, Uniso);
  • University of the State of Bahia (in Portuguese, UNEB);
  • University of the West Santa Catarina (in Portuguese, Unoesc);
  • University of Vale do Taquari (Univates).

Frequently asked questions

What is eduroam?
It is a secure access service that allows users of participant education and research institutions (researchers, teachers, students, employees) to access the internet from any one of them using wireless devices.

Can I use eduroam?
You are entitled to use eduroam if you are connected to an education and research institution that is an identity provider and that supplies the authentication service, in other words, that can confirm that your electronic identification, comprised by the access account and the password, is correct. As a user, you must have an access account in your home institution. You must perform the access setting of on mobile devices, such as notebooks, tablets and cellphones, following the network administration instructions of your institution.

How much is eduroam?
The price to be charged for the membership of this service and its use, as well as any discounts and exemptions, will be released on the service page.

Where can I use eduroam?
In the Brazilian participating institutions listed above. In addition, eduroam is a worldwide initiative, present in over 60 organizations spread throughout the world. When visiting a participant institution, your wireless equipment, if properly configured on its home institution, will sign-in to the “eduroam” wireless network in an automatic manner. The identification and network configuration are the same worldwide and authentication parameters on the network are defined by their home institution. This means that if you set up your device and used it in an institution, it should work with the same configuration anywhere.

Does eduroam use a captive portal or another access method?
The authentication on eduroam happens only through methods considered safe. There is no public access eduroam network. Every eduroam network uses WPA encryption or, preferably, WPA2. The authentication always happens through the IEEE 802.1X (WPA/WPA2 Enterprise) standard. Within the universal access concept, the use of access gates would introduce the problem of using different languages ​​and screen formats. Additionally, portals and other authentication forms do not provide security and allow the fake sites creation, which may allow the capture of accounts and passwords.

Is it safe to use eduroam outside of my institution?
The service is based on the safest encryption and authentication standards currently existing. Its safety exceeds the one available on most Internet cafes and commercial access services. However, nothing prevents a network creation identified as “eduroam” by malicious persons. There is no need to change the “eduroam” settings when using a participant ISP network. If the existing settings in your equipment do not work in a place offering the “eduroam” network, check if that place is on the qualified providers list and notify the network management of your institution on the event, providing the date, time, identification and location of the incident.

What can I do when using eduroam?
When using eduroam, you are submitted to the Terms of Use and safety rules of the visited institution. This means that, in some places, you will have full access to every available services on the internet and on your home institution, while in others the access may be restricted. As a general standard, the basic rules for the use of your institution's network and Brazilian law must be followed. Remember that this is a project to support education and research, and that activities of an exclusively private nature should be avoided. Disable any file sharing software before connecting to eduroam and do not forget that share protected materials by copyright is a crime. The representatives of copyright associations, especially those related to movies and games, always send notifications to internet service providers (ISPs) reporting cases of illegal sharing. Some participating institutions register next to the complaints received from copyright holders the identification of the user who committed the violation, to protect themselves in a legal proceeding. Some institutions may also monitor the websites you are visiting and block some of them or even your access to the network. Likewise, strange behavior of network-connected devices, such as accesses associated with viruses and sending large amounts of emails, can cause suspected compromise of the equipment and, consequently, a blocking access.

What type of equipment can I connect to eduroam?
eduroam uses open standards to provide safe access to the network, which enables that almost every device capable of accessing a wireless network can use the service. Devices with Android (smartphones and tablets), iOS (iPhone, iPad and iPod), Linux (netbooks and notebooks), MAC OS (MAC notebooks) and Windows (netbooks and notebooks) systems may be configured, with more or less easily, to use eduroam, as well as the majority of smartphones with dedicated versions of Microsoft Windows. Smartphones with Symbian, usually used by Nokia and in some Sony Ericsson models, can be configured, but the access is not always successful, even when their security demands are met, such as the use of a safety certificate assured by a recognized Certifying Authority.

How do I set my wireless device to access eduroam?
The configuration of access to the service varies according to the type of authentication used in your education institution. Probably, the configuration is similar to the one used to access the institutional wireless network, changing only the network name to eduroam and adding to the user identification the domain, like in an e-mail account. For example, if in your institution you are advised to identify yourself as “user” in eduroam, you will authenticate yourself as “user@institution.br”. On the side of this page, there are generic instructions for configuring devices. It is likely that your institution has instructions that are more specific on the website that deals with the local wireless network configuration.

I followed the instructions and could not configure my equipment, could you help me?
The support provided by RNP includes only the institutional support and not the end users. You should seek this help with your institution’s networks administration.

I am the administrator of an education / research institution, how can I join the eduroam service?
To offer the service, your institution must be a client institution in the Federated Academic Community (Comunidade Acadêmica Federada - CAFe). Besides the unified user base, your institution must have a RADIUS authentication server, which will receive the authentication requests from the local users. Your institution’s RADIUS server must be part of the national eduroam federation, redirecting the authentication requests of visiting users to the federation server and receiving authentication requests of local users. Providing access to the eduroam network, you must configure your wireless network according to the server specifications. When starting the eduroam joining process, your institution will receive specific instructions to configure the servers and certificates for use in safe connections between the authentication servers.

I am an education institution administrator and I am starting to define a central user database. What is the best way to provide authentication in the wireless network?
There are many ways to provide authentication in wireless networks using the IEEE 802.1X standard, and there are two most basic ones: CHAP (Challenge-Handshake Authentication Protocol) and PAP (Password Authentication Protocol). Regardless of the form chosen, the protection during the sending of passwords is done by the used EAP method, which is TTLS or PEAP. The storage format in the user database used by CHAP is, usually, a NT hash. The passwords for PAP may be in plain-text format, SHA-1, MD5, etc. CHAP is native to Windows systems and is supported by the Android, Linux, iOS and MAC OS systems. To authenticate via PAP in Windows systems, it is necessary to install a WPA client software (Supplicant WPA). On other operating systems, there is native support for PAP.