...
Die äußere Identität muss zwingend eduroam@hhu.de sein und die innere Identität Ihre Unikennung ohne @hhu.de oder @uni-duesseldorf.de. Das Eintragen des angegebenen Zertifikats ist unbedingt notwendig, damit Unbefugte keinen Zugang zu Ihrer Kombination aus Unikennung und Ihrem Passwort bekommen!
English:
The following settings allow manual configuration on devices where an automatic configuration isn't desirable or possible. Select the WiFi network “eduroam” from the list of available WiFi networks and enter the following settings:
- (Outer) Authentication: Tunneled TLS (TTLS) or PEAP
- 2nd phase method / Inner authentication: MSCHAPv2
- Outer / anonymous identity: eduroam@hhu.de
- Inner identity / username: Your eduroam / university username
- Certificate: T-TeleSec GlobalRoot Class 2 (https://www.pki.dfn.de/fileadmin/PKI/zertifikate/T-TeleSec_GlobalRoot_Class_2.crt)
It is strictly necessary that "eduroam@hhu.de" is used as outer identity and your university username is given without trailing "@hhu.de" or "@uni-duesseldorf.de".
Downloading and adding the provided certificate is strictly necessary. Otherwise attackers could access and misuse your university account.