Your VPN connection for Windows 11 does not work anymore? Try this workaround.
1. Open VPN settings by searching for VPN in windows search.
2. Choose your VPN connection Click the arrow following the connection's name, then click Advanced Options.
3. There, next to the Additional VPN Properties entry, click Edit to open the configuration menu.
4. Now click the security tab and configure the settings as shown below.
5. Click OK to save your settings and restart the VPN connection.
Due to the large number of Android versions and manufacturer customizations, it is not possible to provide general instructions here. Individual settings may therefore differ from the instructions described here.
Mobile devices using the Android operating system will connect to eduroam without a specific certificate by default.
1. Open the WLAN settings under Settings → Wireless and network → WLAN settings and select eduroam.
2. Configure the connection with the following settings:
EAP method: PEAP
Phase 2 authentication: MSCHAPV2
CA Certificate: System certificate / default
Domain: radius.zdv.uni-mainz.de
Identity: loginname@uni-mainz.de
Loginname = login name of your JGU account. Make sure that you really use your user name before the @ and not, for example, an email alias that differs from it!
Anonymous identity: leave blank
Password: Password of your JGU account
Click on Safe/Connect.
[/rechtespalte]
New digital certificates for the wireless LANs eduroam and Uni-Mainz were activated on November 24.
What does that mean for you ?
For you, not much changes. The new digital certificate will be either - depending on the operating system or device - accepted automatically, or you must confirm upon request that you accept te certificate. Some devices display the name, others a so-called thumbprint of the digital certificate.
The new certificate for the Wireless LANs for reconciliation
The correct certificate is issued for the server radius.zdv.uni-mainz.de and contains the following information for adjustment, of which only just a part is displayed (againg dependent on the operating system or device):
CN= radius.zdv.uni-mainz.de
O= Johannes Gutenberg University Mainz
S= Rhineland-Palatinate
C= DE
With thumbprint: 58 8c fd 20 66 4b d9 92 bb a6 23 53 06 1a 3c 94 d8 92 c5 18
What are digital certificates?
A digital certificate is proof of authenticity that certifies the identityof a computer or organization. You can compare it with a real-life identity card. Due to legal framework conditins and to prevent misuse, we are obligated to renew te certificates reguarly for these services.
More news from the Data Center → may be found here.
Many services of the ZDV can only be used within the university network. If your computer is located outside the university network, you can connect it to the university network with VPN ("Virtual Private Network") and thus use most of the services of the ZDV.
Continue reading "VPN-Access into the Uni Network under macOS"
On 2 march 2023, new digital certificates will be activated for the VPN servers.
What does that mean for you?
Not much will change for you. The new digital certificate is either automatically accepted - depending on the operating system or device - or you have to confirm that you accept the new certificate when asked. Some devices show the name, others a so-called thumbprint of the digital certificate.
The new digital certificate for VPN for comparison
Issued for: vpn.uni-mainz.de
Issued by: GEANT OV RSA CA 4
With thumbprint: 53 ad 5c 66 ea ae f6 b8 9a 05 4c 37 60 18 6e 95 50 c6 22 6b
What are digital certificates?
A digital certificate is an electronic proof of authenticity that certifies the identity of a computer or an organization. You can also compare this to an identity card in real life. Due to the legal framework and to prevent misuse, we are obliged to renew the certificates for these services on a regular basis.
More news from the Data Center → may be found here.
On October 28, 2022, new digital certificates for wireless LANs eduroam and Uni-Mainz activated.
What does that mean for you ?
For you, not much changes. The new digital certificate will be either - depending on the operating system or device - accepted automatically, or you must confirm upon request that you accept te certificate. Some devices display the name, others a so-called thumbprint of the digital certificate.
The new certificate for the Wireless LANs for reconciliation
The correct certificate is issued for the server radius.zdv.uni-mainz.de and contains the following information for adjustment, of which only just a part is displayed (againg dependent on the operating system or device):
CN= radius.zdv.uni-mainz.de
O= Johannes Gutenberg University Mainz
L= Mainz
S= Rhineland-Palatinate
C= DE
With thumbprint: ae bc 5d d0 ee 25 02 d1 14 e5 8e 77 45 a4 64 b7 37 73 b9 69
What are digital certificates?
A digital certificate is proof of authenticity that certifies the identityof a computer or organization. You can compare it with a real-life identity card. Due to legal framework conditins and to prevent misuse, we are obligated to renew te certificates reguarly for these services.
More news from the Data Center → may be found here.
On October 30, 2026, between 5:00 p.m. and 6:00 p.m., we will activate new digital certificates for the wireless LANs eduroam and Uni-Mainz, as well as for the VPN servers .
What does this mean for you?
Not much will change for you. Depending on your operating system or device, the new digital certificate will either be accepted automatically, or you will be prompted to confirm that you accept the new certificate. Some devices will display the name, while others will show a so-called “fingerprint” of the digital certificate.
The new digital certificate for the wireless LANs
The correct certificate is issued for the server radius.zdv.uni-mainz.de and contains the following information for verification, though (again, depending on your operating system or device) you will only see a portion of it:
CN = radius.zdv.uni-mainz.de
O = Johannes Gutenberg University Mainz
S = Rhineland-Palatinate
C = DE
Fingerprint: 8b a2 83 c1 16 47 31 e2 4b ea 12 be 0f 47 c7 6b 41 f2 59 39
The new digital certificate for VPN
CN = vpn.uni-mainz.de
O = Johannes Gutenberg University Mainz
S = Rhineland-Palatinate
C = DE
Fingerprint: ce 4f f9 ac 2b e0 f9 28 57 10 8e b9 c4 c0 53 1a 47 32 89 80
What are digital certificates?
A digital certificate is an electronic proof of authenticity that verifies the identity of a computer or an organization. You can compare this to an ID card in real life. Due to regulatory requirements and to prevent misuse, we are required to regularly renew the certificates for these services.
More news from the Data Center → may be found here.
Some servers are only accessible inside the university network. JGU provides an SSH jumphost server you can use to connect to these servers.
For authentication, only → public key authentication is allowed.
Paste your public key into this input field. The comment of this key must contain SSHGATE. You can edit your key inside the field after you pasted it. An SSH key comment is always at the end of the key. If you want to connect to multiple servers using this authentication you need to separate them using ,.
Example: ... SSHGATE,HPCGATE,HPCLOGIN
💡 The server name declares the servers the key is deployed to.
If the same key should be used on multiple servers all servers must be added to the comment. If multiple keys should be used each key comment must contain the corresponding server name.
When you have finished, click on SSH-Key Speichern.
As newly registered keys must be distributed to multiple ZDV servers before they can be used, please wait one hour before attempting to establish a connection via the SSH gateways.
(Connections cannot be established as long as the keys are not recognised on all servers, and repeated connection attempts may result in access privileges or an IP address being suspended.)
Host ShortcutName User loginname HostName Targetserver ProxyJump username@sshgate.zdv.uni-mainz.de
After the file is edited you can call the shortcut with ssh ShortcutName.
To establish a secure connection with eduroam you need to use a certificate.
This certificate comes preinstalled on most Linux Distros. Please check if it is already installed on your System. You can find it in the folder /etc/ssl/certs/ . The name is HARICA_TLS_RSA_Root_CA_2021.pem.
If this certificate is already installed, go to step 2.
The certificate of the currently used Certificate Authority can be found on https://repo.harica.gr/rep_dyn.php!
The required certificate is called: HARICA TLS RSA Root CA 2021
(This should normally already be in /etc/ssl/certs/HARICA_TLS_RSA_Root_CA_2021.pem)
Download the certificate, and remember where you saved it. You need this certificate each time you connect to eduroam, so it's good practice to save it somewhere else than your downloads folder. Otherwise it may get deleted accidentally.
To avoid any issues setting up eduroam, make sure no other eduroam profiles exist and delete them if needed.
Select eduroam inside your network manager.
A window with connection settings will open.
Edit the fallowing entries:
Wi-Fi Security: WPA & WPA2 Enterprise
Authentication: Protected EAP (PEAP)
Anonymous identity: can be blank
CA certificate: Here, you need to select the certificate from step 1.
If the certificate is already installed, select /etc/ssl/certs/HARICA_TLS_RSA_Root_CA_2021.pem.
Otherwise select the certificate you downloaded.
PEAP version: Automatic
Inner authentication: MSCHAPv2
Username: Username@uni-mainz.de
Password: Your Password
Click on Connect, you should then get connected to eduroam.
1. Click on the wireless symbol in the lower right of the task bar: 
2. All available networks will be shown. Choose the network eduroam and then click on Verbinden.
3. You will be prompted to enter your login credentials.
Important: Enter your username as follows:
benutzername@uni-mainz.de (Users from other institutions participating in eduroam should use their institution’s login credentials accordingly, e.g., mustermann@uni-frankfurt.de)
Password: Your password for your institution’s account.
Make sure to actually enter your → username before the @ symbol, and not, for example, an email alias that differs from it!
4. The message “The server’s identity cannot be verified” appears. You can view the certificate details.
Currently, you will find the following fingerprint in the certificate details:
8b a2 83 c1 16 47 31 e2 4b ea 12 be 0f 47 c7 6b 41 f2 59 39
Then click Connect to establish the connection.
