Get HelpConfiguration for Network Access

Configuration for Network Access

The University’s IT network, NUSNET, connects all campus buildings and provides the NUS community with installed network points  in each building to access campus network resources.  

To enhance NUSNET security, a scalable authentication mechanism based on industry-standard 802.1X authentication protocol has been enabled for port-based network authentication in all network points in NUS.  Please refer to this link  for technical details of the authentication protocol.

While the upgrade is largely transparent to end users, you are still required to perform a one-time configuration on your desktop or notebook computer that is connected to NUSNET via cable to a network point.

To minimize any difficulty or inconvenience, end users can find the necessary information including one-click auto configuration utilities and guides, implementation schedule and FAQs here for easy installation.

For the necessary one-time configuration on your desktop or notebook computer for Port-based (802.1X) Network Authentication, you can either run the one-click auto-configuration utility or follow the manual configuration guides below. Note: A Domain Computer refers to a computer that has joined Windows Active Directory domains (stf.nus.edu.sg, stu.nus.edu.sg or ext.nus.edu.sg) while a Non-domain Computer refers to a standalone (or workgroup) computer that has not joined Windows domains.

  1. One-click auto-configuration utilities for Windows OS (Windows XP/SP3, Windows Vista, Windows 7, Windows 8)
    For Domain Computers, download this file
    For Non-domain Computers, download this file
    Installation Instructions:
    • Download the file and unzip it to a folder in your computer
    • Right-Click the EXE file, and Choose "Run as administrator"
    • Follow the pop-up message guide
    • Wait a while until the installation is completed
    • If you do not login using your NUSNET ID (like you login using computer local ID and password), when the installation is complete, you will see this pop-up message at the bottom right of your screen. Click on it and login with your Domain\UserID (e.g nusstf\ccetest or nusstu\student) and password.
      You are now successfully connected to NUSNET with the new authentication protocol.
  2. Manual Configuration Guides for Various Operating Systems
    Configuration Guide for Windows XP (SP3)  
    Configuration Guide for Windows Vista  
    Configuration Guide for Windows 7  
    Configuration Guide for Windows 8  
    Configuration Guide for Ubuntu 11.04
    Configuration Guide for MAC OS X 10.6  
    Configuration Guide for MAC OS X 10.8  

Please refer to this link for the implementation schedule of the network authentication enabling in various buildings.

  1. What is port-based (802.1X) network authentication?

    Port-based (802.1X) network authentication is a protocol that authenticates your desktop or notebook computer when it is connected to NUSNET via cable to a network point.

  2. What is the difference between Domain Computer and Non-domain Computer?

    The Domain Computer refers to the computer that has joined Windows Active Directory domains (stf.nus.edu.sg, stu.nus.edu.sg or ext.nus.edu.sg), such as the Lab Computer and the Computer that is purchased by the department and assigned to the staff or faculty. The Non-domain Computer refers to standalone (or workgroup) computer that has not joined into Windows domains.

    You can verify if your computer has joined Windows domain by checking the System setting under Control Panel in your Windows system.

  3. Why do I need to configure my computer for this port-based authentication?

    You need to configure your computer only ONCE so that your computer can authenticate to the network seamlessly. Otherwise you will be prompted to login whenever you need to access Internet resources.

  4. How do I configure my computer for this port-based authentication?

    If you are using a Windows computer (Windows XP/SP3, Windows Vista, Windows 7, Windows 8), you can use the one-click auto configuration tool. For Linux and Mac computers, please follow the manual configuration guides.

  5. When I run the utility and select “Run as administrator”, the computer prompts a login window asking me to provide administrator’s account and password. Why?

    This means your login account does not have administrator rights to run the utility. Please login with an administrator’s account to run the utility.

  6. When I login using my NUSNET ID to connect, there is a security alert pop-up like the following. Why and what shall I do?

    You will receive this security alert pop-up if your computer does not have “thawte Primary Root CA” installed as a trusted CA (by default all Windows systems shall have this Root CA installed). You shall select Connect to continue the connection.

  7. What will happen if I do not configure my computer or my computer is not configured properly?

    You will be prompted to login on a web authentication page each time you need to access Internet resources.

  8. Why do I still get the web authentication page after I have run the utility and configured my computer?

    There are a few possibilities for this.

    1. The utility is not executed properly. You need to run the tool as an administrator
      (refer to the Installation Instructions under Configuration Utilities and Guides).
    2. You did not login after the configuration is done. Please log out and login again to gain the access.
  9. I am using a new computer with the right configuration, but I still get the web authentication page. Why?

    If this is the first time that you have logged in to your computer and you are seeing the web authentication page, please log out and login again. Your computer should be authenticated to the network after this.

  10. I am using campus wireless network to connect to the network. Will I be affected by this?

    If you are only using campus wireless network and not any network points to connect to NUSNET, you do not need to configure your computer and will not be affected by this port-based authentication.

  11. What will happen if I had used the wrong utility to configure my computer?

    You will see the web authentication page when you try to access the Internet. Please re-install and run the correct configuration utility again.

  12. What is the impact if I configure my computer for port-based authentication but my building is not scheduled for implementation?

    There will be no impact and you can continue using your computer to access NUSNET and Internet resources seamlessly.

  13. I am getting the web authentication page on one of the wired ports, but not with another port. Why?

    Port-based authentication will first be enabled to network points in a few pilot buildings followed by other buildings. If your computer is not configured or configured wrongly, you will get this web authentication prompt if you connect to wired points with port-based authentication enabled. Please configure your computer properly with the configuration utilities and guides.

  14. My computer has been configured for NUS port-based authentication. Does the configuration work in other organizations’ networks e.g. NUH network?

    No. The NUS configuration is for the NUS network. If you use your computer in other networks, you have to follow their configuration procedures. Similarly, you cannot use other networks’ configuration for NUS network.

  15. How do I remove this port-based configuration from my computer?

    For Windows computers, please refer to the Configuration Guides to stop the service in the WiredAutoConfig program. For Ubuntu and MAC computers, you can undo the configuration changes manually.

  16. How do I configure my computer if my computer’s operating system is not listed in any of the configuration guides?

    Please approach IT Care at 6516-2080 or for assistance.

  17. If I still experience difficulty, where can I get help?

    Please contact IT Care at 6516-2080 or for assistance.