Configur ing IBM Wireless on Android with
Manual Setup
IMPORTANT: IBM Wi-Fi access is not allowed for mobile devices for general daily business purposes, excluding
Blackberry devices configured in accordance with corporate security policy. Because of security gaps on mobile
devices for data protection/encryption, IBM security policy prohibits their use for general use on the IBM Wi-Fi
network. IBM Wi-Fi access should only be enabled on mobile devices that: 1) never leave an IBM secured
building, or 2) are only used for test and development purposes. When connecting to the IBM Wi-Fi for
test/development purposes, only development and test systems should be accessed from the mobile device and
no IBM business data or production business systems should be accessed.
Additionally, as with any device connecting to the IBM network, full ITCS300 compliance must always be
maintained even for devices only being used for test/development purposes. For iOS and Android mobile
devices this means installing and configuring IBM Endpoint Manager so that it can apply the required security
controls to your device. More information on installing IBM Endpoint Manager on your mobile device can be
found at the IBM Endpoint Manager Overview site.
-----------------------------------------------------------------------------------------------------------------------------------------------------
Here are the full instructions to install your newly obtained digital certificate for IBM Wireless connectivity, which
include screen captures. You should have started at the Getting started page first to setup your client device for
IBM Wireless Connectivity using a digital certificates. These instructions only cover the Part B steps from the
Manual instructions for Android clients.
Step 1: You should have requested a digital certificate that was e-mailed to you already per the Manual
instructions Part A.
Step 2: Open the mail application on your Android device and open the email that you sent yourself
with the attached P12 certificate file.
Step 3: Tap on Save, you should get a popup telling you the attachment has been saved. Note: On some
devices you may get a further prompt for the Credential Use – VPN and apps, or WiFi – choose WiFi
and tap on OK.
Step 4: Open up Settings on your Android Device and tap on Security.
Step 5: Tap on Install from Storage.
Step 6: Your device should find the certificate you previously saved and prompt you for the password
that you associated with your certificate when you requested it. Enter it and then tap on OK.
Step 7: Enter an appropriate name for the certificate, such as IBM and then tap on OK.
Step 8: If you have not previously set a lock screen password (you will have if you are a Traveler user)
you will be prompted to create one, so tap on OK, and choose a lock screen password that you will
remember. This password is independent of any other password you may have and you must remember
it, it cannot be reset for you if you forget it. If you already have a lock screen password then you will be
asked to confirm it instead of being prompted to create a new one.
Step 9: A message will pop up that your certificate has been installed.
Step 10: Open up Settings on your Android device and make sure that WiFi is on, then tap on the WiFi
label itself.
Step 11: You may already see an entry for IBM, but ignore that and tap on the + button on the bottom
right of the screen.
Step 12: In the Add network screen tap on Security and tap on 802.1x EAP.
Step 13: For EAP Method, choose TLS.
Step 14: Scroll down and for User Cer tificate choose the certificate you named earlier.
Step 15: For identity enter your IBM UID (your serial number + your country code).
Step 16: Scroll up and for the Network SSID enter IBM and then tap on Save.
Step 17: Tap on the IBM entry in the list of available WiFi access points.
Step 18: Tap on Connect.
Step 19: You will briefly see Authenticating, followed by Connected under the IBM access point.
Step 20: Open the Android web browser and try and access an intranet web site such as w3.ibm.com to
prove you are connected.
