Eduroam Wi-Fi Onboarding Activation for macOS X


The purpose of this process is to establish a unique device certificate for WiFi identification on ‘eduroam’.  Once enrolled, the new device certificate is used to identify you (as an student or employee) on WiFi ‘eduroam’ instead of using your BeachID and password.


In order for this onboarding process to work, you must physically be on campus to connect to the campus network.


  1. This has the benefit of being able to connect to WiFi even if your BeachID account is locked or expired.  Regular BeachID password changes have no impact to the device certificate.  After your password changes, no action is required on your enrolled device.
  2. This method retains each of your devices' trust certificate for eduroam WiFi for up to 5 years for students and 10 years for employees. This means not having to update your WiFi password for this duration, because your password is no longer involved.

Note:  As necessary, when certain certificates expire, you may be required to ‘re-enroll’ to update the profiles on your device. 

Installation Steps

Note: This was performed on macOS Catalina Version 10.15.7. Older macOS softwares may vary in the installation process.

  1. Connect your device to the campus WiFi network ‘CSULB-OnBoard’. If you are prompted to “Log in” close the window instead
  2. You MUST open Safari or Chrome. If the captive portal does not appear, type in the address bar ‘’ to continue
  3. On the CSULB OnBoard Enrollment landing page, select the ‘Begin Device Enrollment’ link. This will take you to SSO sign-on page
  4. Your web browser should now be at the OnBoard Enrollment service portal ( Click “Install Certificate”Install Certificate webpage
  5. Save the certificate to your downloads folder or desktop.  Locate the file you just downloaded and double-click itWindow asking to save downloadFile located in the Keychain
  6. Click Add to install the certificate into the Keychain.  Note that “CSULB WiFi BYOD” is shown as “not trusted” – this is expected Add certificate pop upCertificate located in Keychain Access window
  7. Back to the Safari web page, you must now click on “Install Profile” and save the file to your downloads folder or desktop.  Locate the file you just downloaded and double-click it Install Profile webpageSaving download window
  8. The Profile tool will prompt you to “Continue” this operation Install Profile tool window
  9. Select Install to agree to install the profile CSULB BYOD Device Enrollment Asking permission to install profile window
  10. Click Continue to accept the certificates and settings Install profile window asking to continue
  11. Click Install to continue window asking permission to install Profile
  12. You must approve the installation using password or TouchID to make changes to your system TouchID windowWindow asking to type in Mac password
  13. The CSULB BYOD Device Enrollment profile is now installed.  Note “CSULB Unverified” CSULB BYOD Device Enrollment Profile window
  14. Back on the Safari web page, the status changes to “Device provisioning complete” and instructs you to connect to eduroam webpage showing Device provisioning is complete
  15. Click the AirPort icon and select eduroam then click on “Open Network Preferences” AirPort icon
  16. Click the Advanced button Network window highlighting Advanced button
  17. Important! Remove beachnet+ and beachnet-guest-access from your device’s Preferred Networks list by highlighting each network, then clicking the “-“ button and then OK Network window highlighting preferred WiFi networks
  18. Click Apply on the Network Preferences panel then close this windowNetwork window asking to apply preferences


For additional assistance, please visit the Help Desk or contact the Technology Help Desk at or 562-985-4959.


Article ID: 132480
Fri 4/9/21 10:33 AM
Mon 10/11/21 10:09 AM