Eduroam Wi-Fi Onboarding Activation for iOS


The purpose of this process is to establish a unique device certificate for WiFi identification on ‘eduroam’.  Once enrolled, the new device certificate is used to identify you (as an student or employee) on WiFi ‘eduroam’ instead of using your BeachID and password.


In order for this onboarding process to work, you must physically be on campus to connect to the campus network.


  1. This has the benefit of being able to connect to WiFi even if your BeachID account is locked or expired.  Regular BeachID password changes have no impact to the device certificate.  After your password changes, no action is required on your enrolled device.
  2. This method retains each of your devices' trust certificate for eduroam WiFi for up to 5 years for students and 10 years for employees. This means not having to update your WiFi password for this duration, because your password is no longer involved.

Note:  As necessary, when certain certificates expire, you may be required to ‘re-enroll’ to update the profiles on your device. 

Installation Steps

Note: This was performed on an iOS device with iOS 14.4.2. Older iOS softwares may vary in the installation process. 

  1. Connect your device to the campus WiFi network ‘CSULB-OnBoard’

  2. Open the Safari app. If the captive portal does not appear, type in the address bar ‘’ to continue

  3. On the CSULB OnBoard Enrollment landing page, select the ‘Begin Device Enrollment’ link. This will take you to SSO sign-on page.

  4. After authenticating, your device will be re-directed to the OnBoard Enrollment service portal. Tap on ‘Install Certificate’Portal showing Install certificate

  5. Tap Allow Pop up asking user to Allow access to Settings
  6. Tap Close and go to your device 'Settings' Pop up saying Profile Downloaded
  7. Tap Install Settings showing Install Profile
  8. Tap Install Installing certificate window
  9. Tap Done Profile Installed window showing Verified
  10. Back on the web page, tap on Install Profile Enrollment Web page showing Install Profile
  11. Tap Allow Pop up asking user to allow access to Settings app
  12. Tap Install Settings tab showing Install Profile
  13. Tap Install Certificate tab asking permission to Install
  14. Enter your passcode if you have one Enter your passcode window
  15. Tap Done Profile Installed Verified Window
  16. Web page confirms 'Device provisioning complete' and instructs the user to select 'eduroam' from WiFi menu Device provisioning complete web page
  17. Important! Remove beachnet-guest-access and beachnet+ from your device. Tap blue circled 'i' WiFi menu
  18. Tap on 'Forget this network' for both beachnet+ and beachnet-guest-access Forget This Network window from WiFi


For additional assistance, please visit the Help Desk or contact the Technology Help Desk at or 562-985-4959.


Article ID: 132477
Fri 4/9/21 8:52 AM
Mon 10/11/21 10:09 AM