How-To: Install a Certificate Wi-Fi Profile on Unmanaged Windows

EZRADIUS allows you to distribute EAP-TLS profiles to non-managed Windows devices to allow passwordless network certificate authentication without the need of an MDM.

Overview - Wi-Fi Profiles for Unmanaged Windows Devices with EZRADIUS

If your organization has enabled self-service Wi-Fi profiles, you can create your own Wi-Fi profile for your Windows devices. There are three ways to obtain them: EZRADIUS sent you an email with the profile, you downloaded the profile from the EZRADIUS portal, or request an email with your profile from the EZRADIUS portal.

The Windows Wi-Fi profile is made up of three files, each used to install the profile on your Windows device:

  • root.cer: the Root CA certificate.
  • certificate.pfx: your Wi-Fi certificate.
  • wifi-profile.xml: the Windows Wi-Fi profile.

Step-by-Step Guide - How to Install a Wi-Fi Profile on Windows

Follow the steps below to install a Wi-Fi profile on your Windows device.

Step 1 - How to Download Your Windows Wi-Fi Profile

The first step is to download your Wi-Fi profile from either the email sent by EZRADIUS or from the EZRADIUS portal.

How to Request an Email with your Wi-Fi Profile from the EZRADIUS Portal

If you haven’t received an email with your Wi-Fi profile, you can request an email with your profile from the EZRADIUS portal.

Your administrator must have enabled self-service profile distribution in EZRADIUS for you to request an email with your Wi-Fi profile. If it is not enabled, ask them to email you the profile directly.

  1. Go to the EZRADIUS portal (this URL will be provided by your organization).

  2. From the left-hand menu, click on the WiFi Profiles button.

    Request Profile from EZRADIUS Portal

  3. If your organization has multiple profiles available, select the profile you want to request.

    Select Profile to Request from EZRADIUS Portal

  4. Under Windows, click on the Email Profile button.

    Send Email with EAP-TLS Wifi Profile from EZRADIUS Portal to Windows

  5. An email will be sent to your registered email address with the Wi-Fi profile attached.

How to Download Your Wi-Fi Profile from Email

If you received an email from EZRADIUS with your profile, follow these steps to save the files on your Windows device:

  1. Open the email from EZRADIUS on your Windows device.

  2. Save the root.cer, certificate.pfx, and wifi-profile.xml attachments to a folder on your device. Keep the email open, since you will need the certificate password from it in Step 3.

    Email with EAP-TLS Profile from EZRADIUS for Windows

How to Directly Download a Wi-Fi Profile from the EZRADIUS Portal

You can also directly download your Wi-Fi profile from the EZRADIUS portal.

  1. On the device you want to install the profile on, open your browser and go to the EZRADIUS portal (this URL will be provided by your organization).

  2. From the left-hand menu, click on the WiFi Profiles button.

    Request Profile from EZRADIUS Portal

  3. If your organization has multiple profiles available, select the profile you want to download.

    Select Profile to Request from EZRADIUS Portal

  4. Under Windows, click on the Download button.

    Download EAP-TLS Profile for Windows

  5. Copy the certificate password shown in the portal. You will need it in Step 3.

    Get Wi-Fi Certificate Password from EZRADIUS Portal

  6. A zip file with the root.cer, certificate.pfx, and wifi-profile.xml files will be downloaded. Extract the files to a folder.

Step 2 - How to Install the Root CA Certificate on Windows

You only have to install the Root CA certificate if it shows a red X on the top left corner when you open it. If it doesn’t have a red X, you can skip to Step 3.

  1. Double-click on the root.cer file and click on the Install Certificate button. The certificate will be installed in the Trusted Root Certification Authorities store.

    Install Root CA Certificate on Windows

  2. Click Next on the Certificate Import Wizard.

    Install Root CA Certificate on Windows

  3. Select the Place all certificates in the following store option and click Browse.

    Install Root CA Certificate on Windows

  4. Select the Trusted Root Certification Authorities store and click OK.

    Install Root CA Certificate on Windows

  5. Click Next and then Finish.

    Install Root CA Certificate on Windows

Step 3 - How to Install the Wi-Fi Certificate on Windows

Next, install your Wi-Fi certificate in your Personal certificate store.

  1. Double-click on the certificate.pfx file and click Next.

    How to Install Wi-Fi Certificate on Windows

  2. Click Next on the Certificate Import Wizard.

    How to Install Wi-Fi Certificate on Windows

  3. Enter the certificate password from the EZRADIUS email or portal in the Password field.

    How to Install Wi-Fi Certificate on Windows

  4. Click Next.

    How to Install Wi-Fi Certificate on Windows

  5. Click Finish.

    How to Install Wi-Fi Certificate on Windows

  6. Click OK.

Step 4 - How to Install a Wi-Fi Profile on Windows

Once the certificates are installed, you can add the Wi-Fi profile to Windows.

  1. Find the full path of the wifi-profile.xml file, for example, C:\Users\Marcos\Desktop\wifi-profile.xml.

  2. Run the following command in PowerShell, replacing the path with your own:

    netsh wlan add profile filename="C:\Users\Marcos\Desktop\wifi-profile.xml" user=current

  3. Done! Your device should now connect to the Wi-Fi network automatically.