Introduction and Disclaimer
UCSC is an early adopter of the Eduroam service in Sri Lanka. While the national legal, policy, and technical infrastructure is still evolving under LEARN, UCSC has chosen to participate proactively to benefit its academic community. As such, aspects of this service and policy may change over time in alignment with LEARN and global Eduroam standards.
Purpose
To define the operational, security, and user responsibilities for Eduroam access at UCSC, ensuring compliance with LEARN federation standards and international Eduroam guidelines.
Scope
- UCSC students, staff, and affiliated researchers
- Visitors from Eduroam-participating institutions
- UCSC-managed infrastructure supporting Eduroam (RADIUS servers, APs, identity providers)
Authentication Architecture
- SSID: eduroam
- Security: WPA2/WPA3-Enterprise with AES encryption
User Eligibility
- UCSC users: Must have an active UCSC LDAP account and use
username@ucsc.cmb.ac.lk - Visitors: Must be from a recognized Eduroam institution and use their home credentials
Device Configuration
- Supported OS: Windows, Linux, macOS, iOS, Android
- Setup guides: eduroam.ucsc.cmb.ac.lk
- CA Certificate: UCSC/LEARN Root CA
Security Requirements
- Credential sharing is strictly prohibited
- Devices must not run rogue DHCP/DNS or AP services
- UCSC reserves the right to block misconfigured or compromised devices
Logging and Privacy
- Authentication attempts (timestamp, MAC, username, result)
- Session metadata (duration, AP used)
- Retention: 6 months
- Privacy: No content inspection; aligned with GDPR-like principles
Support and Troubleshooting
- UCSC users: Contact ucsc.cmb.ac.lk/noc
- Visitors: Should contact their home institution for support
Compliance and Enforcement
- Eduroam access at UCSC is a conditional privilege. UCSC reserves the right to revoke access without prior notice if policy violations or technical risks are identified.
- Use of incorrect, borrowed, or stolen credentials will result in revocation and may be reported to the user’s home institution
- Violations may lead to disciplinary action or federation-level reporting
Review and Updates
This policy is reviewed upon changes in LEARN or global Eduroam standards.