Automatic updates to Sequoia enabled a privacy feature on Apple devices that automatically turns on private Wi-Fi addresses. This forces those using RedRover and Cornell-Visitor to complete the registration process every time their MAC address changes. Those using the eduroam network will receive an email, but will not need to re-authenticate.

To prevent this from happening to you, follow one of the steps below. 

Students, faculty, and staff are encouraged to use eduroam for secure wi-fi connection on campus. Cornell uses the SecureW2 service to configure your device to connect to eduroam, which adds a secure certificate to your device. If you have iOS17, running SecureW2 onboarding client will change your “Private Wi-Fi Address” default setting from “rotating” to “fixed,” which is the desired setting. If you have iOS18, your device chooses “fixed” by default when joining a new network that uses the recommended WPA2 or stronger security. Running SecureW2 on your iOS18 device will ensure your “Private Wi-Fi Address” is set to “fixed” as well.

Once you complete a short enrollment process, you will be able to connect to any eduroam network (either at Cornell or at another eduroam-participating institution) without having to log in for five years. Use this link to start the enrollment process.

While Connected to eduroam, RedRover, or Cornell-Visitor

1. Open Settings on your device.
2. Select Wi-Fi.
3. Click (or touch) the information icon to the right of the appropriate network. This will look like a lower case i inside a circle.
4. Turn off Private Wi-Fi Address.

While Connected to a Different Network

1. Open Settings on your device.
2. Select Wi-Fi.
3. At the top right of the screen, select Edit. This will show you a list of all networks you have connected to (and remembered). (You will need to use TouchID or a password to access this list.)
4. You will find eduroam, Cornell-Visitor, and RedRover at the bottom of the list under "Managed Devices".
5. Click (or touch) the information icon to the right of the network. This will look like a lower case i inside a circle.
6. Turn off Private Wi-Fi Address.

You can use these instructions to update similar settings on other networks that you may use.