Phasing Out UCB Wireless & UCB Guest
The UCB Wireless and UCB Guest Wi-Fi networks are currently being phased out in select campus buildings before being fully retired and replaced across campus in late December 2025. Learn more about the Wi-Fi Improvement Project.
Apple compatibility issue with campus Wi-Fi
Apple's Private Wi-Fi Address feature, introduced in macOS Sequoia and updated for iOS 18 and iPadOS 18, can cause connectivity issues when using campus Wi-Fi networks. The same is true if you update your iWatch or VisionPro.
OIT strongly recommends that you set Private Wi-Fi Address to "off" on your Apple devices for the UCB Wireless, UCB Guest and eduroam networks.
Learn more about the impacts of Apple's Private Wi-Fi Address feature.
Choosing the Right Network
CU Secure Wi-Fi consistently outperforms CU Guest, eduroam and mobile data plans inside campus buildings. Devices even join CU Secure more quickly when a user enters a building or wakes up their laptop or tablet.
For the smoothest possible Wi-Fi experience, we strongly encourage CU Boulder students, faculty and staff to install the CU Secure certificate on their personal devices and turn off auto-connect for the other campus networks.
Is CU Secure better than CU Guest?
If you have an IdentiKey, then CU Secure will provide a much smoother campus Wi-Fi experience for you compared to CU Guest.
In general, CU Secure requires fewer logins, allows you to connect more devices to the network, and facilitates a quicker network connection when you enter a campus building.
| Network Settings | CU Secure | CU Guest |
|---|---|---|
| Registration frequency: How often you need to register the device | Every 2 years | Every day |
| Registration period: How often you need to request new guest credentials | N/A | Every 7 days1 |
| Number of devices: How many of your devices can access Wi-Fi | No limit | Up to 3 devices |
| Speed to join: How quickly your devices recognize and join the network2 | Nearly instantaneous | Up to 30 seconds |
In addition, CU Secure provides additional security, stability and access benefits compared to CU Guest.
| Network Features | CU Secure | CU Guest |
|---|---|---|
| Encrypts Wi-Fi traffic | Yes | No |
| Seamlessly handles Private Wi-Fi Address rotation3 | Yes | No |
| Allows access to internal CU websites and resources | Yes | Limited |
| Supports printing to wired campus printers | Yes | No |
1For most of the year, CU Guest only allows logins using guest Wi-Fi credentials. Once requested, guest credentials remain active for a period of seven days, after which the user must request new guest credentials. The seven-day registration period does not apply to faculty, staff and students who log in using their IdentiKey credentials, which is only permitted during the first few weeks of the fall and spring semesters.
2In general, Wi-Fi devices connect more quickly to CU Secure than CU Guest because devices recognize CU Secure as the most encrypted and so "preferred" network. CU Guest's lack of encryption makes it less preferred, resulting in a slower initial connection as the device searches for a more secure network to join instead.
For most Secure Computing devices, when waking from a sleep state (e.g., having their lid opened), there is no delay in connecting to CU Secure. There is a slight delay in connecting to CU Guest, because the device needs to negotiate the connection.
3Visit Wireless Internet - Help to learn how Apple's Private Wi-Fi Address feature can cause connectivity issues when using a Wi-Fi network that doesn't have certificate-based authentication (e.g., CU Guest).
Is CU Secure better than eduroam?
If you're regularly traveling between CU Boulder and other eduroam institutions, then it makes sense to use eduroam at those locations.
However, when you're on the CU Boulder campus, we recommend using CU Secure for two key reasons:
- CU Secure was designed with CU Boulder's user base and IT infrastructure in mind. As a locally hosted network, our support staff thoroughly understand the network configuration and have access to a wider range of troubleshooting tools.
- CU Secure uses a stronger authentication method than eduroam (EAP-TLS vs. PEAP and EAP-TTLS), protecting you from certain vulnerabilities.1
Here's a quick comparison of each network's features:
| Network Features | CU Secure | eduroam |
|---|---|---|
| Encrypts Wi-Fi traffic | Yes | Yes |
| Authenticates without sending passwords over Wi-Fi1 | Yes | No |
| Maintains Wi-Fi connection if passwords change2 | Yes | No |
| Allows access to internal CU websites and resources | Yes | Yes |
| Supports printing to wired campus printers | Yes | Yes |
| Is available at other participating institutions3 | No | Yes |
1To connect to an encrypted Wi-Fi network, your device is required to send certain identifying information over Wi-Fi to the network's authentication server. eduroam's authentication methods (PEAP and EAP-TTLS) rely on a server-side certificate only, so your device needs to send your username and password to confirm your identity. In contrast, CU Secure uses both client and server certificates (EAP-TLS), allowing the server to verify your identity using the certificate on your device rather than your IdentiKey credentials.
2Your device uses your saved IdentiKey credentials to connect to eduroam. If your username or password changes, your device will continue to send your previous credentials until you manually update them. This doesn't occur on CU Secure, because it doesn't use your IdentiKey credentials to verify your identity.
3eduroam is available at more than 3,800 locations in the U.S. and more than 38,000 locations worldwide.
Is CU Secure better than my data plan?
Your mobile carrier's cellular network is your best option in locations where campus Wi-Fi signals are weak or non-existent, like outdoors or in a stairwell.
However, whenever you're inside a campus building, CU Secure will almost always provide a better wireless experience.
| Network Features | CU Secure | Carrier Data Plan |
|---|---|---|
| Cost | Included in tuition | Depends on your plan |
| Data limit | None | Depends on your plan |
| Performance | Generally faster, smoother experience | Depends on signal strength1 |
| Indoor coverage, including classrooms | Designed for full indoor coverage | Depends on signal strength1 |
| On-campus support available | Yes | Limited |
| Allows access to internal CU websites and resources | Yes | Limited |
1The quality of a user's wireless internet experience is heavily dependent on both environmental factors and overall demand for network resources.
- Signal strength is typically affected by the user's distance from a Wi-Fi access point or cell tower, type and quantity of physical obstructions between the user and the signal source, and interference from neighboring Wi-Fi devices.
- Connection speeds are typically affected by the number of networks being broadcast at a time and the number of devices connected to or active on the network in a given location.
General FAQ
What areas of campus have Wi-Fi?
Between UCB Wireless, UCB Guest and eduroam, Wi-Fi is available in approximately 90% of all indoor building space on campus—and even on the Buff Bus. Check the wireless ratings for your classrooms.
Do other devices interfere with wireless?
Wi-Fi communication is extremely susceptible to interference caused by competing radio transmissions that operate in the 2.4GHz and 5GHz bands. Wi-Fi interference can result in low to no wireless signal, extremely slow download speeds, dropped Wi-Fi connections, and increased delay for internet browsing.
Note: Personal Wi-Fi access points are prohibited in the residence halls.
Is wireless bad for my health?
Testing done on wireless network devices indicates no confirmed health risks at this time. You should read the health information provided by your wireless card manufacturer and follow their recommendations.
If you are interested in additional information, the FCC has a detailed Wireless Devices and Health Concerns article.
Can I print from a wireless device?
Yes, students can print from a wireless device using any wepa printer. See the Student Printing and Scanning page for more information. Many departments also have printers for faculty and staff use.
