OIT Office of Information Technology
| Menu

CU Secure Wi-Fi - Register Your Mac

Follow these instructions to register your personal or non-Secure Computing* Mac on the CU Secure Wi-Fi network.

If you're using an older macOS version, see SecureW2's macOS help guides.

*Note: Devices enrolled in CU Boulder's Secure Computing framework are automatically configured to connect to CU Secure Wi-Fi and don't require manual registration.

What You'll Need

  • Your IdentiKey email address (e.g., rabu1234@colorado.edu) and IdentiKey password
  • Your laptop's password

Tips

  • Prefer a video? Visit OIT's YouTube channel for a step-by-step screen recording.
  • Missing MFA? To download and install the certificate, you'll need to log in with your IdentiKey credentials and authenticate using Microsoft MFA.
  • Images too small? Click or tap the screenshot to open a larger, crisper image.
  • Got stuck? Visit OIT's CU Secure troubleshooting page for solutions to common problems.

OS:
Layout:
one column
two columns

Step 1

Is your device connected to the internet?

Step 2

Using Safari,* go to wifi.colorado.edu, then click the Install the CU Secure Certificate button.

*If your device's default browser is not currently set to Safari, you'll need to change it for the duration of this process. Visit Apple's Make Safari Your Default Browser page for instructions.

Step 3

Confirm that your operating system was identified correctly. If it wasn't, use the Select your device drop-down to change it.

Step 4

Click the Register Your Device button to download the SecureW2 JoinNow onboarding client.

Step 5

If asked whether to allow downloads on "cloud.securew2.com," click Allow.

Step 6

Once the download is complete, open CU-Secure-Certificate.dmg.

Step 7

If the file opens in a new window, double-click to open CU-Secure-Certificate.

Step 8

If asked whether to open an app downloaded from the internet, click Open.

Step 9

If asked whether to allow "CU-Secure-Certificate" to find devices on local networks, click Allow.

Step 10

The onboarding client will open and instruct you to log in through your browser. Click Next.

Step 11

If asked whether to allow "CU-Secure-Certificate" to perform actions in your browser, click Allow.

Step 12

If you're already logged in to your campus Microsoft 365 account in that browser, skip to Step 14 or 15.

If you're not logged in, you'll be directed to a Microsoft login page. Enter your IdentiKeyUsername​@colorado.edu, then click Next.

Step 13

Enter your IdentiKey password, then click Sign in.

Step 14

If prompted, complete Microsoft multi-factor authentication.

If you receive an error message, see our troubleshooting page for next steps.

Step 15

The onboarding client will display various status messages as it generates a key, enrolls and issues the certificate, and connects to the network.

Step 16

If asked to allow SecureW2 JoinNow to make changes:

  1. Enter your laptop's password.
  2. Click OK.

Step 17

The onboarding client will direct you to install the CU Secure profile. Click Next.

Step 18

The onboarding client will display a "Configuring..." status message.

When finished, a pop-up will indicate that the profile was downloaded. Click OK.

Step 19

If the Device Management window doesn't open automatically, follow these navigation steps: System Settings > General > Device Management.

Double-click to open the University of Colorado Boulder CU Secure profile.

Please note: For older macOS systems, go to System Settings > Profiles to find the CU Secure profile. 

Step 20

On the installation confirmation page, click Install...

Step 21

If asked to confirm the request, click Install.

Step 22

To allow Device Management/MDM to make changes:

  1. Enter your laptop's password.
  2. Click OK.

Step 23

If asked to allow SecureW2 JoinNow to use your current location, click Allow.

Step 24

If asked to allow eapolclient to access the "SecureW2 JoinNow Any Access" key in your keychain:

  1. Enter your laptop's password.
  2. Click Always Allow. (Learn why this is safe to do: CU Secure Wi-Fi FAQs.)

Note: If you're not currently in range of CU Secure Wi-Fi, you'll likely see this prompt when you first connect to CU Secure.

Step 25

Are you currently on campus?

  • Yes: Skip to Step 29.
  • No: Continue to Step 26.

Step 26

If you're not on campus, the onboarding client will indicate that it's connecting.

Step 27

When finished, the client will indicate that configuration succeeded, but the "Network may not be in range or Password may be incorrect."

Click Continue.

Step 28

Your device is now registered on CU Secure Wi-Fi and should connect automatically once you're in range.

Note: If you're completing this process over Wi-Fi, the previous step may have caused your device to disconnect from the network. Check to make sure you still have internet.

Step 29

If you're on campus, the onboarding client will indicate that it's authenticating to CU Secure.

Step 30

Once the client has finished authenticating, it should display a "Joined..." message. Click Done.

Note: You may be connected to CU Secure even if the client displays a message that suggests otherwise. Check your Wi-Fi connection before attempting to troubleshoot.

Step 31

If you're in range of CU Secure Wi-Fi, it should appear in your device's known Wi-Fi networks.