Last updated: 
1 month 4 days ago
Group Manager

A place to share information on all aspects of eduroam in the UK.

Follow us on Twitter @eduroamuk - for news, interest, information, photos and fun.


Click on item and scroll down to the selected content at the bottom of the page.

Guidance document - eduroam and Safeguarding

Guidance document - Cost of Implementing eduroam

eduroam(UK) Technical Specification Summary of Recommendations Checklist

eduroam(UK) Technical Specification Summary of Requirements Checklist

eduroam(UK) Technical Specification

NHS and eduroam/shared use of wireless/govroam

ORPS in Azure - alternatives to the use of ICMP

Sending Operator Name with Cisco ISE 2.0

eduroam in Public Buildings and Spaces in City Centres

TLS 1.2 and updated RADIUS requirements

FreeRADIUS Packet Handling - examining the flow

FreeRADIUS Best Current Practice Configuration for eduroam 

Performance tweaks for RADIUS and backend authentication systems

eduroam(UK) Microsoft NPS Configuration Guide v0.1

eduroam(UK) Service Provider Assurance Tool User Guide

eduroam(UK) Service Provider Assurance Tool Phase2 Field Trial Feedback

Improving the Reliability of NPS as an Authenticator in eduroam

Advisory: Using Status Server

Advisory: Use of MD5 Certificates Deprecated in Favour of SHA-1 for RADIUS servers

Advisory: Windows Mobile 8 and Certificate Verification

NWS41 eduroam Forum presentations - TKIP, CUI, NAPTR, QoS Probe

NWS40 FreeRADIUS Demystified seminar presentation

Geant Funding available

Janet Lumen House eduroam Service Information

UK eduroam Usage Feb 2013

EAP-pwd Moving Towards a Deployable Standard

Site Finder and Service Information Directory

eduroam(UK) Technical Specification 1.3 (archived) - superseded by 1.4

eduroam User Troubleshooting Flowchart for IT Support Staff

eduroam Administrators Troubleshooting Flowchart

NAPTR Record Creation Using Microsoft Windows 2008 R2 DNS Server

eduroam Best Practice Pointers

FreeRADIUS 2 eduroam Deployment at University of Sussex

Filter by tags:

Group administrators:


This guide describes the setup of the Microsoft Network Policy Server for use with eduroam in the UK. Whilst it is the key component, the Organisational RADIUS Server (ORPS) is just one element of your eduroam deployment and this guide must be read in conjunction with:

i) Implementing eduroam Roadmap



This document is intended for Technical managers wishing to explore the topic of safeguarding minors and vulnerable adults on eduroam, particularly in respect of users roaming away from the home campus to locations where the eduroam service provides unfiltered access to the internet. The background to the issue is considered together with an appraisal of how the key elements of eduroam support the safeguarding of users and how eduroam deployment may be tailored to suit the policy in force at the individual organisation.


eduroam technical specification checklist (based on specification 1.4)

A precis of all requirements and recommendations that can be checked during deployment of eduroam at a site - or when reviewing your service or checking issues.

Please note that proxying of RADIUS accounting datagrams to the NRPS is now deprecated - and will be forbidden in the next iteration of the technical specification


The eduroam UK technical specification mandates that an organisations' ORPS must be PINGable from the 3 National RADIUS Proxy servers (NRPS) and from the eduroam UK support site.   This is all part of basic traffic light monitoring (Red/Amber/Green) so we have a 'is their server up?' answer when troubleshooting...  (We're moving to Status-Server in-band RADIUS checking where possible....but neither NPS nor ISE (nor previous versions - IAS or ACS) support that :(  )

however, Azure blocks ICMP, thus PING is unavailable.

Prev | Next