CSAILPrivate

CSAILPrivate

CSAILPrivate is CSAIL’s encrypted, authenticated wireless network. It uses Cisco Meraki authentication for improved security and ease of setup compared to older Kerberos-based methods.

Required for:

Note: While your wireless traffic is encrypted, other points within the CSAIL network and outside CSAIL may still monitor traffic. Encryption provides an added layer of protection.


Create a Wireless Account

Before connecting to CSAILPrivate, you must create an account:

  1. Visit my.csail.mit.edu
  2. Log in with your CSAIL Kerberos credentials
  3. Go to My Account
  4. Under Manage WiFi Password, click Change
  5. Choose a password:
    • Option A (Recommended): Use the randomly generated password
      • Click Copy and save to your password manager
    • Option B: Create your own password
      • Deselect “Use generated password”
      • Enter a unique, strong password (15+ characters)
      • Save it securely — you’ll need it to connect devices
  6. Click Save

Connecting to CSAILPrivate

Select your device type below for setup instructions.

Apple iOS

If you previously used CSAILPrivate:

To connect:

  1. Select CSAILPrivate from available networks
  2. Enter your CSAIL email address as username
  3. Enter your WiFi password (from my.csail.mit.edu)
  4. When prompted, trust the certificate
  5. Join the network

macOS

Supported on macOS 14+

If you previously used CSAILPrivate:

To connect:

  1. Select CSAILPrivate from available networks
  2. Leave Identity blank (if prompted)
  3. Enter your CSAIL email address as username
  4. Enter your WiFi password (from my.csail.mit.edu)
  5. When prompted to verify certificate, select Continue
  6. Join the network

Windows 11

  1. Start → Type “wireless” → Select “Connect to a Network”
  2. Browse for CSAILPrivate and select it
  3. Enter your WiFi password (from my.csail.mit.edu)

Ubuntu

Tested on Ubuntu 24.04. Other distros may vary slightly.

  1. Click WiFi in upper right corner
  2. Select CSAILPrivate
  3. Enter the following settings:
    • Security: WPA2
    • Auth: PEAP
    • Domain: meraki.com
    • Certificate: /etc/ssl/certs/ca-certificates.crt
    • PEAP Version: Automatic
    • Inner Auth: MSCHAPv2
    • Identity: Your CSAIL email address
    • Password: Your WiFi password (from my.csail.mit.edu)

Need help? Contact help@csail.mit.edu

Android

Tested on Samsung Galaxy S21 Ultra 5G with Android 14

  1. Settings → Connections → Wi-Fi
  2. Select CSAILPrivate
  3. Enter the following:
    • Identity: Your CSAIL email address
    • Password: Your WiFi password (from my.csail.mit.edu)
    • Certificates: Use system certificates
    • Domain: meraki.com

Verify the CSAILPrivate Certificate

To verify the wireless network certificate, check against these fingerprints:

Algorithm Fingerprint
SHA-256 42 C3 00 15 6D 6E A9 21 B3 0B 4D 75 77 85 A8 AA 4B 99 D8 87 37 62 92 FD F6 E9 F5 F8 31 2D DD A2
SHA-1 ED B6 2B CD ED 15 DF 27 B7 9D C1 BD 5C 6D D9 9A E5 F0 4D 4A