CU Secure Wi-Fi | Office of Information Technology

New Wi-Fi Now Available Campuswide

As of Dec. 17, 2025, the new CU Secure and CU Guest Wi-Fi networks are live in all campus buildings. eduroam is still available, but UCB Wireless and UCB Guest were discontinued. Learn how to connect to campus Wi-Fi.

OverviewFeaturesCostGet StartedRe⁠-⁠enroll Your DeviceTerms & ConditionsAccessibility

Overview

The CU Secure Wi-Fi network is designed to provide the most secure and stable Wi-Fi connection for CU Boulder faculty, staff and students.

It uses the most advanced encryption and authentication standards available, and once a device is registered on the network, it will connect to CU Secure Wi-Fi seamlessly for two years before asking you to re-register.

Note: Graduate and family housing apartments use Comcast internet services, not campus Wi-Fi. For details, see the Network and Internet Services page.

Features

Enterprise-grade, end-to-end encryption
Two years of password-free Wi-Fi connections
Seamless handling of Private Wi-Fi Address rotation
Unlimited number of devices per person
Expanded IT support tools
Access to internal campus resources (e.g., protected services and servers)

To compare CU Secure's features with CU Guest, eduroam or your data plan, see the "Choosing the Right Network" FAQ section.

Cost

CU Secure Wi-Fi is provided as a common good to the campus, which means there is no direct cost to anyone.

Who Can Get It

Anyone with an active IdentiKey can register their device and connect to CU Secure when in range.

How to Get It

To access CU Secure Wi-Fi, your device must be actively registered on the network.

Secure Computing Devices (No Action Needed)

If your university-owned device is enrolled in Secure Computing, do not install the CU Secure certificate manually. Secure Computing devices will connect to CU Secure automatically whenever they're in range. (Learn how to identify a Secure Computing device.)

If your Secure Computing device doesn't connect automatically, please refer to the CU Secure Wi-Fi - Troubleshooting page.

Personal & non-Secure Computing Devices (Action Needed: Register Your Device)

To connect the following types of devices to CU Secure Wi-Fi, you'll need to register them manually:

Personally owned laptops, smartphones and tablets
University-owned devices that are not enrolled in the Secure Computing framework (learn how to identify a Secure Computing device)

Next Steps

First, make sure you've set up Microsoft MFA on your IdentiKey account, as you'll need to log in to Microsoft with your IdentiKey credentials in order to download and install the certificate.

To install the CU Secure certificate on your device, follow along with these step-by-step instructions:

If the certificate installs successfully, you'll receive an email from CU Boulder Campus Wi-Fi (wifi_noreply@colorado.edu) confirming your device is registered on CU Secure.

Tips & Troubleshooting

If you have any difficulties, visit our CU Secure Wi-Fi - Troubleshooting page for solutions to a wide range of issues.

For the smoothest Wi-Fi experience, turn off auto-connect for the other campus Wi-Fi networks after installing the CU Secure certificate.

Business-Critical Specialty Devices (e.g., QR Code Scanners, Temperature Sensors)

This category of devices is restricted to specialty Wi-Fi devices that perform business-critical functions, as determined through consultation between the operator and OIT. This may include:

wireless point-of-sale devices (e.g., Square, Clover)
QR code scanners
smart refrigerators
temperature sensors

If you worked with OIT in the past to determine whether your device was critical to business operations, then OIT has migrated the records for these devices from UCB Wireless to the new networks. The devices should connect to the new networks automatically or after a reboot or reset.

If you have a new business-critical Wi-Fi device that you believe needs to be on CU Secure Wi-Fi, rather than CU Guest Wi-Fi, submit a request to the IT Service Center and include the device's Wi-Fi MAC address. (For help finding the Wi-Fi MAC address, refer to Wireless Internet - Help).

All Other Specialty Devices (e.g., Gaming Systems, Smart TVs)

Personal consumer devices that aren't critical to business operations must be registered on CU Guest Wi-Fi, not CU Secure. Learn how to register a specialty Wi-Fi device on CU Guest.

Re-enroll Your Device

Personal and non-Secure Computing devices remain registered on CU Secure for two years. You'll receive an email notification one month before the device's registration expires with instructions on how to re-enroll it for another two years.

Terms & Conditions

The following agreement is published on the CU Secure certificate download page:

By accessing and using this system, you become subject to University of Colorado policies and regulations (regardless of your affiliation). For more information regarding your responsibilities with respect to IT resources, see Administrative Policy Statement 6005 and terms and conditions.

Accessibility Notification

CU Boulder is committed to making information and resources available in the digital environment accessible to all users.

The CU Secure Wi-Fi process has accessibility issues that may negatively affect users of assistive technologies or those using alternative access methods. We are addressing the issues and working with the supplier to make this experience accessible to all.