Your browser shows this web page without use of style sheets. This may be because you are using an old browser, your browser can not display style sheets, or the presentation style sheets (CSS) is disabled.

Zusammenfassung überspringen

Windows 10

How to configer Windows 10 and 11 for 802.1X and Internet access




How to configure personal computers with Windows 10 or 11 for Internet access by the wired Ethernet at the students' dormitories of Studierendenwerk Bielefeld


This manual describes how to configure Windows 10 or 11 by three steps for Internet access respectively wired 802.1X- authentication, which is a precondition.

Preparations

Please first deactivate the wireless module of your computer (switch at the notebook, special function key etc.). The Studentenwerk does not operate wireless LAN in its dormitories.
Remove the ethernet cable from your computer.

1) Starting the 802.1x authentication service

The service responsible for the 802.1x-authentication on Ethernet LAN must be activated first on Windows. Open the services panel. Your Windows will display a long list of services. Locate the service 'wired autoconfig'. In the description of the service (second column) you will always find the code ' IEEE 802.1x' in latin characters. Attention: Please do not confuse this service with the service for the wireless network (wlan).

Dienst 'automatische Konfiguration (verkabelt)





Select the context menu 'properties' to the service (right click on the service or menu 'action' > 'properties').

Kontextmenue zum Dienst 'automatische Konfiguration (verkabelt)





Choose 'automatic' for startup type.

Starttyp 'automatisch' für den Dienst wählen





From now on this service will be started automatically by Windows at each system startup. Click once on the button 'Start' to start the service now without rebooting your system.

Dienst einmalig manuell starten



For the service 'wired autoconfig' now 'start' and 'automatic' should appear.

Dienst startet automatisch und ist gestartet





This completes the first part of the configuration. You can close all windows now.





2) LAN-configuration:

Open the system control panel. From here go to 'Network and Internet'

Systemsteuerung





and then choose 'Change adapter settings'.

Netzwerk- und Freigabecenter





Here you'll see one or more network connections. This depends on the features of your computer. Select the properties of the wired 'Ethernet' by double-clicking or right-click .

Netzwerkverbindungen





The tab 'Authentication' is only available if you have started the service 'wired autoconfig' according to the first part of this guide. If the tab 'Authentication' is missing, then the first step has failed and must be repeated again. Choose the tab 'Authentication'.

Netzwerkverbindungen





Enable the 'IEEE 802.1X-Authentifizierung' and 'Remember my credentials for this connection each time I'm logged on'. Then choose 'Settings'.

Eigenschaften LAN-Verbindungen/ Authentifizierung





Students of Bielefeld University:
In the following window please enable 'Verify the server's identity' and the root certificate 'USERTrust RSA Certification Authority', choose 'Secured password (EAP-MSCHAP v2)' as method for network authentication, check 'Enable Identity Privacy' and type 'anonymous' into the form. Then choose 'Configure'.

Einstellungen geschütztes EAP




Students of Hochschule Bielefeld HSBI:
In the following window please enable 'Verify the server's identity' and the root certificate 'USERTrust RSA Certification Authority', choose 'Secured password (EAP-MSCHAP v2)' as method for network authentication, do not 'Enable Identity privacy' and leave the form empty. Then choose 'Configure'.

Einstellungen geschütztes EAP




In the following window please deactivate 'Automatically use my Windows logon name and password (and domain if any)', because your logon name at Bielefeld University, Hochschule Bielefeld or Oberstufenkolleg usually is different from your Windows logon name.

Eigenschaften EAP MSCHAPv2



Choose "OK" two times, which will bring you back to the Authentication tab.

Choose now 'Additional Settings'

Zusätzliche Einstellungen




Enable 'Specify authentication mode' and choose 'User authentication'.

802.1x Benutzerauthentifizierung





Go back once more to the window 'Local Area Connection Properties', choose the tab 'Networking', disable IPv6 and then choose the properties of 'Internet Protocol Version 4 (TCP/IPv4)'

Eigenschaften LAN-Verbindungen/ Netzwerk





In any case enable 'Obtain an IP address automatically' and 'Obtain DNS server address automatically'

Eigenschaften Internetprotokoll Version 4 (TCP/IPv4)


You have completed the second step and can close all windows now once again.





3) Authentication

Now connect your computer with the Ethernet cable to the network. An input mask appears, in which you enter your username@realm and your password from Universität Bielefeld, Hochschule Bielefeld or Oberstufenkolleg.
The realm is "@uni-bielefeld.de" for all students of Bielefeld University and Oberstufenkolleg and "@hsbi.de" for students of Hochschule Bielefeld (Bielefeld University of Applied Sciences).
For example: Your name is Jane Doe, your login is "jdoe" and your are student of Bielefeld University, than you should type "jdoe@uni-bielefeld.de".
For example: Your name is Max Pattern, your login is "mpattern3" and your are student of Hochschule Bielefeld, than you should type "mpattern3@hsbi.de".

Formular Anmeldeinformationen


If the authentication failed because the pair of your username and password you entered was not correct for example or the authentication process from your Windows could not be completed within the prescribed period, however, the input mask will appear again.


Finally, select "No" for public network.

Auswahl Art des Netzwerkes

Finished, your access to the Internet is established!



If you get no Internet access, even though the authentication was successful, please check again the IP settings for your Ethernet connection (see above) and start the authentication process again, by separating the computer from the network for a short time.