WiFi: Register a Departmental Device for Internet of Things (IoT) Wi-Fi Service

University of Minnesota departmental and unit-owned Internet of Things (IoT) devices such as door locks, sensors, cameras, Apple TV, and more can be registered for Wi-Fi access even if they don't support standard authentication with a username and password. 

This registration should be performed using the University Internet ID and password of the IoT Admin that owns the device. 

  • Important Notes: Regardless of whether they can connect to eduroam, it is recommended these devices be registered through the ClearPass Guest Registration portal under a departmental account. The same registration database is used for both the existing legacy unencrypted and the new encrypted IoT services. Adding a group password to an existing device will enable it to use either service.

Students, staff, and faculty with personal devices: Follow the Register a Personal Device for IoT guide.

View PDF

Register IoT Admin Devices for the Internet of Things (IoT) Wi-Fi Service

Understand the Internet of Things (IoT) Services

Body

At the University of Minnesota, personal and departmental Internet of Things (IoT) devices can be registered for the Wi-Fi service. The current IoT service option is the Encrypted Service.

Encrypted Service

  • Uses UofM-IoT SSID
  • Better security with encrypted Wi-Fi traffic
  • Easier setup process
  • Supports more device types
  • Requires device registration and a password (also known as a pre-shared key or PSK)

Best Practices for IoT Devices

The IoT service is designed for devices that are unable to log in to Wi-Fi with your Internet ID and password. These are some best practices when registering and using IoT devices on the University Wi-Fi network:

  • Any device that is capable of using eduroam should use eduroam. Eduroam is more secure because it has a higher level of encryption. 
  • Personal device registration expires after one year and registration must be renewed to continue service. Devices are automatically removed from the registration database unless they are renewed.
  • Regular software updates on IoT devices are recommended.
  • If the IoT device asks you to choose a channel when connecting to Wi-Fi, select 5GHz if able. 
  • If a device uses MAC address randomization that feature should be disabled otherwise the device may not be able to connect to Wi-Fi.
Body

Registering personal and departmental Wi-Fi devices allows users affiliated with the UMN to connect devices such as Xbox, Roku, Apple TV, Google Chromecast, door locks, freezer monitors, and more to the University Wi-Fi network. Unregistered devices can disrupt or slow down the University Wi-Fi network, making it difficult for neighboring devices to connect.

The types of devices that should be registered using the Register a Personal Device for IoT guide or Register a Departmental Device for IoT guide are listed below.

Xbox, Roku, Apple TV, and other streaming devices

Xbox, Roku, Apple TV, and similar devices can be registered for Internet of Things (IoT) service. Follow the directions on this guide to connect these devices.

Google Chromecast and Google Home

Do not register Google Chromecast, Google Home, and similar device configurations using this process. These devices are limited to residence halls and require a Student Internet ID and password. They have additional steps for setup on the UofM-IoT Network. Please follow Register your Chromecast Device for these devices.

Laptops, Smart Phones, Printers

Do not register laptops, smart phones, or printers using this process unless otherwise specified.

Phones and laptops should connect to eduroam using your full University email address ([email protected]) and password authentication. For more information on eduroam, follow Connect to eduroam.

Smart Light Bulb and Similar Home Devices

Please note that some Internet of Things (IoT) devices designed to work on home networks may not be supported by the UMN network. The scale, design, and security controls of the UMN network makes it challenging for some devices to function properly on the network.

Some examples include:

  • Devices that require a direct connection or special addressing from a Wi-Fi router (e.g. a Phillips Hue light bulb).
  • Some devices that connect to a local hub that is then connected to the University network.

Departmental Devices (i.e., Door Locks, Cameras, Sensors)

Departmental-owned on-campus door locks, cameras, sensors, and similar devices can be registered for Internet of Things (IoT) service. Follow the directions on this guide to connect these devices.

Register and Connect an Individual Device to the Encrypted Service

Body

University of Minnesota departments and units can register to connect departmentally-owned Internet of Things (IoT) devices such as door locks, cameras, sensors, and Apple TVs to the Wi-Fi service. An IoT Admin for the department or unit needs to register the IoT device for their department or unit. 

What does it mean to be an IoT Admin?

IoT Admins are typically technical departmental staff who have a need to register Internet of Things devices like freezer monitors or door locks. 

A person with IoT Admin access will have a unique view of the device registration portal that allows them to specify the role of the device, uofm-IoT-campus or uofm-IoT-internet, as well as choose an expiration date, which is not available to users who are registering personal devices.

Your responsibility as an IoT Admin

Only University-owned devices should be registered through this portal. You will need to register personal IoT devices using the instructions for Register a Departmental Device for Internet of Things (IoT) Wi-Fi Service. 

Should the device be used for malicious purposes, the IoT Admin who registered the device will be held responsible for the activity. University Information Security will contact the admin who registered the device to discuss next steps upon discovery of malicious activity.

In the event a departmental account is not used, customers are responsible for transferring responsibility for the devices that are registered under your name upon leaving the University.

Requesting IoT Admin Permissions

We strongly recommend using a departmental account to ensure control of the device is maintained by the department instead of a specific person. If you do not have one and would like to use one, please request a departmental/organizational account first.

To request IoT admin permissions, contact Technology Help and provide the following information: 

  • Specify that you are looking to get IoT Admin permissions for an account 
  • Provide the account (internet ID) you want to use to register devices
Body

A device's wireless (Wi-Fi) MAC address, also known as hardware or physical address, is used for connecting to the network. 

Finding Your Device's MAC Address

For help finding the MAC address of your device, select the link for your device below:

Note: If a device uses MAC address randomization that feature should be disabled otherwise it may not be able to connect to Wi-Fi.

If you need assistance, please contact Technology Help.

Body

University of Minnesota departmental Internet of Things (IoT) devices such as door locks, sensors, and cameras can be registered for Wi-Fi service.

Follow these steps to register your device for the Encrypted IoT Service. This step is a part of the Register a Departmental Device for IoT Wi-Fi Service guide. 

Registering an IoT Admin Device for Encrypted IoT Service

Do not register laptops or smart phones using this process unless otherwise specified for temporary IoT device AirGroup setup. Phones and laptops should connect to eduroam using your full University email address ([email protected]) and password. Full access to your University account and systems (i.e., MyU, Canvas, PeopleSoft) may not be fully functional on the IoT network. For more information on eduroam, follow Connect to eduroam.

    1. Go to the Wi-Fi Registration webpage.
      • This link will only work if you are accessing this article on campus through a device connected to eduroam or you are connected to VPN.
      • If you are registering this device for yourself, sign in with your Internet ID and password.
      • If you're working on behalf of a department or another individual, please contact Technology Help.
    2. From the side menu under Devices, select Create Device.
    3. In the MAC address field, enter the wireless or Wi-Fi MAC address of the device.
      • The device name can be whatever you choose. For example, if you are registering a Roku, you might name it Goldy's Roku.
    4. Enter a name for the device in the Device Name field. This name is to help you identify the device to yourself in the future.
    5.  Check the Wi-Fi Password box to generate a password (also referred to as a pre-share key or PSK).
      • Once registered, the device can connect to UofM-IoT with the generated password.MAC Address field with description "MAC address of the device." Device Name field with description "Name of the device". Wif-Fi Password checkbox with description "Use a unique Wi-Fi password for this device"
    6. If you are registering a device that you are casting or communicating to or from another device (such as your smartphone), as part of the registration process:
      1. Check the AirGroup box.
      2. Leave the default Personal selected in the Ownership section.
      3. If you will be sharing the device with another person in your department, put their Internet ID in the Shared With field, separating multiple IDs by commas.
        • This will allow you to cast from another device to the registered device even if they are connected to different SSIDs (e.g. eduroam, UofM-IoT, etc.).

    AirGroup field with Enable AirGroup checked and message "AirGroup uses device ownership and location information". Ownership field with Personal selected. Message "A personal device is automatically shared with other devices owned by the same user." Shared With field with message "Enter the Internet ID that will be able to use this device. Use a comma-separated list"

      1. Select the expiration time that makes sense for this device in the Account Expiration dropdown.
        • For devices like door locks, you can set the device to never expire so you need not register it every year.
      • Select the Account Role for the device:
        1. uofm-iot-internet allows the device to access the whole internet both internal and external to campus. Best for devices like University owned game consoles or other casting devices (Apple TV, Chromecast, etc.).
        2. uofm-iot-campus only allows devices to reach internal campus resources. Best for devices like door locks. 
      • Add a short description of the device and details about how it will be used in the Notes section.
        1. Example: This AppleTV will be used in Coffman Memorial Union room ###. Contact 612-555-5555 or the registered email for more informationExample of blank Internet of Things (IoT) Admin Device Registration form
      • Check the Terms of Use checkbox to accept the terms of use.
        • The message reads I am the sponsor of this account and accept the terms of use.
      • Select Create.
      • Your device is now registered. You can connect to the IoT Encrypted Service. 
      Body

      At the University of Minnesota, personal and departmental Wi-Fi devices can be connected to the Internet of Things (IoT) service. Follow these steps to connect your device for the Encrypted IoT Service. 

      NOTE: If your device is using the Legacy Unencrypted IoT service and not the new Encrypted Service, the legacy IoT service will eventually be disabled. Any new devices should be registered for the new encrypted IoT service. Existing IoT devices can easily be converted to the new service. Registration is required annually.

      Connecting Your Device to Encrypted IoT Service

      1. Open the Network Settings on your device and view the list of available Wi-Fi networks.
        • This should be near to where your wireless MAC address was listed.
      2. From the list of available networks, select UofM-IoT and enter the generated password.
      3. Your device is now connected.

      Please contact UMN Technology Help if you have problems following the above steps.

      Body

      These are some of the known issues and their workarounds for connecting departmental and personal Internet of Things (IoT) devices for University of Minnesota IoT Wi-Fi service. 

      Wireless Printers

      Wireless printers broadcast a signal that conflicts with University of Minnesota networks, and can lead to poor service for everyone in the area near the printer. Instead, please connect to printers using a USB cable.

      Apple TV

      Attempt the connection with UofM-IoT following the instructions in the Register a Personal Device for the Internet of Things (IoT) Wi-Fi Service Self-Help guide. In case that does not work, you can attempt to connect using our enterprise eduroam connection by using Apple Configurator (link is an archived Apple article).

      • Apple Configurator can set up a profile to add to the Apple TV that will connect to our enterprise connection. Some support may be offered from [email protected] and user discussions are taking place on [email protected].

      For University Departments hoping to use an Apple TV in a meeting or conference room, send a message to [email protected] for assistance.

      Bulk Register and Connect Multiple Devices to the Encrypted Service

      Body

      University of Minnesota departments and units can register to connect departmentally-owned Internet of Things (IoT) devices such as door locks, cameras, sensors, and Apple TVs to the Wi-Fi service. An IoT Admin for the department or unit needs to register the IoT device for their department or unit. 

      What does it mean to be an IoT Admin?

      IoT Admins are typically technical departmental staff who have a need to register Internet of Things devices like freezer monitors or door locks. 

      A person with IoT Admin access will have a unique view of the device registration portal that allows them to specify the role of the device, uofm-IoT-campus or uofm-IoT-internet, as well as choose an expiration date, which is not available to users who are registering personal devices.

      Your responsibility as an IoT Admin

      Only University-owned devices should be registered through this portal. You will need to register personal IoT devices using the instructions for Register a Departmental Device for Internet of Things (IoT) Wi-Fi Service. 

      Should the device be used for malicious purposes, the IoT Admin who registered the device will be held responsible for the activity. University Information Security will contact the admin who registered the device to discuss next steps upon discovery of malicious activity.

      In the event a departmental account is not used, customers are responsible for transferring responsibility for the devices that are registered under your name upon leaving the University.

      Requesting IoT Admin Permissions

      We strongly recommend using a departmental account to ensure control of the device is maintained by the department instead of a specific person. If you do not have one and would like to use one, please request a departmental/organizational account first.

      To request IoT admin permissions, contact Technology Help and provide the following information: 

      • Specify that you are looking to get IoT Admin permissions for an account 
      • Provide the account (internet ID) you want to use to register devices
      Body

      A device's wireless (Wi-Fi) MAC address, also known as hardware or physical address, is used for connecting to the network. 

      Finding Your Device's MAC Address

      For help finding the MAC address of your device, select the link for your device below:

      Note: If a device uses MAC address randomization that feature should be disabled otherwise it may not be able to connect to Wi-Fi.

      If you need assistance, please contact Technology Help.

      Body

      To import a list of new departmental or unit-owned Internet of Things (IoT) devices, use the bulk import facility. This requires using a spreadsheet template with some default values. This step is a part of the Register a Departmental Device for IoT Wi-Fi Service guide.

      Bulk Importing IoT Devices

      Bulk importing IoT devices is only for IoT Admin departmental/unit-owned devices. 

      1. Download the IoT Bulk Import Template. 
        • Select File then Download then Comma Separated Values (.csv).
      2. Enter data in your spreadsheet. There are 10 required columns. 
        • Columns A, D, E, F and I contain required default values and should not be changed.
          • Column A Is Device default value: Yes
          • Column D Activation default value: Now
          • Column E Expiratin default value: N/A
          • Column F Lifetime default value: 0
          • Column I MPSK Enabled default value: 1
        • Columns B, C, G, H and J require you to enter your device data.
          • Column B MAC Address: device MAC in the format FF-FF-FF-FF-FF-FF
          • Column C Role: uofm-iot-campus or uofm-iot-internet
          • Column G Sponsor: your IoT Admin internet ID
          • Column H Wi-Fi Password: password for your device
          • Column J IoT Device Name: name of your device
      3. When you have your spreadsheet ready, log in to ClearPass Guest Registration portal.
      4. Select Import Devices.
        Import Devices. Import a list of devices from a text file and create a device for each entry in the list.
      5. Select Choose File to import your updated spreadsheet and select Next Step.
        Upload User List window. Choose File button is in the Accounts File section. An example file is chosen and Next Step button is selected.
      6. Verify your data and select Next Step.
        Example page with table list of data that was imported from the csv and a Match fields form section that you can use to match each of the fields in the imported data with each of the parameters needed to create a device.
      7. Select Create Account to import your new passwords.
        Example page of the 5 accounts in a table list with their imported data. Button for Create Accounts is selected.
      8. Select Manage Devices to verify your import.
      Body

      If you want to set the same password for a group of departmental or unit-owned Internet of Things (IoT) devices, you need to export a spreadsheet, edit the passwords and then import your new spreadsheet back into the registration portal. This step is a part of the Register a Departmental Device for IoT Wi-Fi Service guide.

      Setting the Same Password for a Group of IoT Devices

      If you want to set the same password for a group of IoT devices, you need to export a spreadsheet, edit the passwords and then import your new spreadsheet back into the registration portal.

      1. Log in to ClearPass Guest Registration portal. If inaccessible, please try the alternate WiFi Registration webpage. 
        • These links will work only if you are accessing this article from a device on campus connected to eduroam or are connected to VPN. You may need to use a private/incognito window to sign in with a departmental account.
      2. Select Export Devices.
        Export Devices. Export a list of all current devices to a file. You can select the format you want to export to here.
      3. Select Export Comma-Seperated Values.
        • This will download a file with a name of the form Guest Devices YYYY-MM-DD.csv to your computer. 
      4. Open your "Guest Devices" file in Googlesheets. Note the Wi-Fi Password column.
        Example of Wi-Fi Password column with list passwords in the Google Spreadsheet.
      5. Edit the password column to make the passwords the same. Leave all other values in the spreadsheet as is.
        The example Wi-Fi Password column in the Google Spreadsheet now has the same password for every item
      6. Save and export your spreadsheet.
      7. Go back to the registration portal and select Import Devices.
        Import Devices. Import a list of devices from a text file and create a device for each entry in the list.
      8. Select Choose File to import your updated spreadsheet and select Next Step.
        Upload User List window. Choose File button is in the Accounts File section. An example file is chosen and Next Step button is selected.
      9. Verify your data and select Next Step.
        Example page with table list of data that was imported from the csv and a Match fields form section that you can use to match each of the fields in the imported data with each of the parameters needed to create a device.
      10. Select Create Account to import your new passwords.
        Example page of the 5 accounts in a table list with their imported data. Button for Create Accounts is selected.
      11. Select Manage Devices to verify your import.
      Body

      At the University of Minnesota, personal and departmental Wi-Fi devices can be connected to the Internet of Things (IoT) service. Follow these steps to connect your device for the Encrypted IoT Service. 

      NOTE: If your device is using the Legacy Unencrypted IoT service and not the new Encrypted Service, the legacy IoT service will eventually be disabled. Any new devices should be registered for the new encrypted IoT service. Existing IoT devices can easily be converted to the new service. Registration is required annually.

      Connecting Your Device to Encrypted IoT Service

      1. Open the Network Settings on your device and view the list of available Wi-Fi networks.
        • This should be near to where your wireless MAC address was listed.
      2. From the list of available networks, select UofM-IoT and enter the generated password.
      3. Your device is now connected.

      Please contact UMN Technology Help if you have problems following the above steps.

      Body

      These are some of the known issues and their workarounds for connecting departmental and personal Internet of Things (IoT) devices for University of Minnesota IoT Wi-Fi service. 

      Wireless Printers

      Wireless printers broadcast a signal that conflicts with University of Minnesota networks, and can lead to poor service for everyone in the area near the printer. Instead, please connect to printers using a USB cable.

      Apple TV

      Attempt the connection with UofM-IoT following the instructions in the Register a Personal Device for the Internet of Things (IoT) Wi-Fi Service Self-Help guide. In case that does not work, you can attempt to connect using our enterprise eduroam connection by using Apple Configurator (link is an archived Apple article).

      • Apple Configurator can set up a profile to add to the Apple TV that will connect to our enterprise connection. Some support may be offered from [email protected] and user discussions are taking place on [email protected].

      For University Departments hoping to use an Apple TV in a meeting or conference room, send a message to [email protected] for assistance.

      Convert a Legacy Device

      Body

      The Internet of Things (IoT) option for departmental and personal devices is the Encrypted Service. This service enables enhanced security for your devices. It also allows devices to connect that require a password (PSK) to attach to the network. 

      • Note for IoT Admins of departmental IoT devices: Devices without a pre-shared key or PSK need to be updated to the new encrypted service following this article's directions.

      The legacy IoT service has been retired. Any new devices must be registered for the new encrypted IT service.  If your device is connected using the Legacy Unencrypted Service you can follow these steps to convert to the new Encrypted Service.

      Converting Your IoT Device from Legacy Unencrypted Service to Encrypted Service

      1. If you are off-campus, connect to UMN VPN.
      2. Go to ClearPass Guest Device Manager and select Manage Devices.
        Manage Devices. View a list of all current devices. You can modify and remove individual devices here.
      3. In the Manage Devices page, highlight the MAC address you want to update and select Edit.
        Table with the devices that have been created with their MAC address
         
      4. An Edit form opens. In the Wi-Fi Password section, check the Use a unique Wi-Fi password for this device box. Edit Device window with example MAC address information and Device Name filled out
      5. Select the Update Device button.
      6. Your new password will be generated and displayed in the Current Password section.
        Updated Device Details window with the example MAC address and device information listed.
        • Note: If you bulk registered multiple devices as a departmental IoT Admin, select Manage Devices to see the newly created passwords. Use the password corresponding to an individual device to connect to UofM-IoT. If you want to set the same password for a group of devices, refer to Setting the Same Password for a Group of IoT Devices.
          Example list of MAC Addresses with their newly created Wi-Fi Passwords. List includes MAC address, Device Name, Role, Expiration, Wi-Fi Password, and Sponsor.
      7. You have completed the process. You can now use this new password to connect your IoT device to the UofM-IoT Wi-Fi network.