Connecting to Australian Public School Internet

Every now and then, somebody decides that it is time to mess around and 'improve' enterprise Wi-Fi. As of late, someone has been tweaking and mucking about with the internet configuration of Australian public schools.

This brief tutorial aims to outline how to properly connect to Australian public-school Wi-Fi at the current time.

Step 1

The first step in getting onto the network is to find out if your password has expired. In most cases, your Department of Education login (the same one you use to access Connect) will expire every 90 days (about 3 months).

If you expect that your password has expired, you will have to reset it.

If you have an internet connection, then the easiest way to reset it is through the DoE Portal.

You could also go to Connect and login. Once logged in, you can navigate to 'My Connect' and change your password to something new and secure.

In the event that you don't have an internet connection, you can request that your teacher or network admin change your password.

Step 2

Your next step is to install the required certificates. These certificates allow you to certify yourself on the network. The process varies based on your computer's operating system.

Windows

As the Australian government loves further padding the pockets of Microsoft, most schools supply guides for getting setup with Windows. That said, many of these guides are crap, so the process is documented here.

1. Start off by getting connected to the school network. The certificates are only available on the internal network and not on non-school networks.
2. Once connected, you must download these certificates:

• Education-CA.cer
• Education-SubCA1.cer
• Education-SubCA2.cer

3. On your keyboard, hit the 'Windows' key and R key simultaneously. In the box that appears, type mmc.exe.
4. In the application that opens, press the Ctrl key and the M key simultaneously.
5. In the left panel, double click 'Certificates'. In the pop-up that opens, select 'Computer account' and then click next.
6. Select 'Local computer' and then click Finish. You should be directed back to the main page of the application.
7. In the left panel, you should click the small arrow next to 'Certificates (Local Computer)' to expand the category. Then click the small arrow next to 'Trusted Root Certification Authorities'.
8. You should now see the Certificates folder on the left panel. Right click the folder to bring up the context menu. In the menu, select All Tasks and then Import.
9. In the wizard that should have appeared, select 'Local Machine' and then 'Next'.
10. On the next page, click 'Browse...' and locate your certificates. Select one of them, click open, and then click 'Next'.
11. In the next pop-up, select 'Trusted Root Certification Authorities' and then click 'OK'.
12. You should now be presented with a page showing the settings you've chosen in this guide. The 'Certificate Store Selected by User' should be 'Trusted Root Certification Authorities' and the 'Content' should be 'Certificate'.

Linux

Most institutions don't offer support for Linux. There's a certain misunderstanding that anyone using Linux is an elite hacker with intention to take down the mainframe and overthrow the establishment. It's a pain, and I've spent countless hours over the years getting it working.

Thankfully, we've now got a handy script developed by ToastXC and myself. It connects to the network, downloads the certs, and applies a patch if running Fedora. It's available on GitHub as DoE-Network-Kit-Linux.

1. Ensure you have all the required dependencies installed. These include OpenSSL, Curl, Git, and NetworkManager. They should all be available in your distro's package repository.
2. Download the script. You can do this by cloning the GitHub repo with git clone https://github.com/toastxc/DoE-Network-Kit-Linux.git.
3. Then you can enter the directory holding the script with cd DoE-Network-Kit-Linux.
4. This directory holds scripts for different schools. Unless your school is specifically listed, generic.sh should work for you. Run the script with sh generic.sh. You will probably need root permissions, so consider prefixing the command with something like sudo or doas.
5. The script will now run and guide you through the rest of the process. Do note that your password won't show up while you write it for security reasons.

Step 3

You can now log onto your school's internet. In the event that your browser doesn't redirect you automatically, you may need to manually access the login portal.

Had any issues with the process or think something may have changed? Leave a comment down below, and I'll try my best to assist.