Secure wired network setup for Windows


Follow the steps in this knowledge article to connect an unmanaged Windows 11 device to the University of Toronto's network by a wired connection (Ethernet).

To connect a device that is managed by the university, refer to KB0015527: Secure wired network setup for Digital Workplace managed Windows.

Table of Contents

Connect to the wired network

  1. Select the Start Menu (Windows icon) from the desktop toolbar. In the search box, type services.msc and press Enter.
    "services.msg" typed into Windows Search.
  2. Scroll down to Wired AutoConfig in the list, then right-click on it and choose Properties.
    "Wired AutoConfig" highlighted in the Services application.
  3. In the Wired AutoConfig dialog, select Automatic for the Startup type. Select Start, followed by Apply, and finally select OK.
    The Automatic startup type, service Start button, and Apply button highlighted in the "Wired AutoConfig Properties" menu.
  4. Open the "Control Panel" dialog by selecting the Start Menu and searching for "Control Panel".
    The Control Panel app highlighted in Windows Search.
  5. Under Network and Internet, select View network status and tasks.
    "View network status and tasks" highlighted in the Control Panel main menu.
  6. Select Change adapter settings from the sidebar.
    "Change adapter settings" highlighted in the Control Panel sidebar.
  7. From the "Network Connections" dialog, select the wired network connection from the list. It is usually labeled "Ethernet" or "Local Area Connections". Then, select Properties.
    The Properties dropdown menu option highlighted under the Ethernet network interface.
  8. Select the Authentication tab. Select Enable IEEE 802.1X authentication, and set the network authentication method to Microsoft: Protected EAP (PEAP).
  9. Select Fallback to unauthorized network access and select Settings.
  10. From the "Protected EAP Properties" dialog:
    • Check Verify the server's identity by validating the certificate.
    • Check Connect to these servers and enter radius.wireless.utoronto.ca.
    • Under Trusted Root Certification Authorities, select:
      • Sectigo Public Server Authentication Root R46
      • AAA Certificate Services
      • USERTrust RSA Certification Authority
  11. Select Configure, and ensure that the "Automatically use my Windows logon name and password" checkbox is unchecked.
    Locations of the above configuration options visually highlighted.
  12. Select OK and close the "Protected EAP Properties" dialog.
  13. Return to the "Authentication" tab, then select Additional Settings.
  14. In the "Advanced Settings" dialog, enable Specify authentication mode and choose User authentication. Then select Save Credentials.
  15. A login screen prompt will appear. Enter your UTORid and Password.
    The above configuration options, visually highlighted.
  16. Select OK to close all the opened windows. Your computer should now be authenticated to the wired network.

Document change history

Date Section Updated
November 10, 2026

Aligned formatting. Added "Related information" and intro sections. Windows 10 is no longer recommended.
August 19th, 2025

Added Sectigo Public Server Authentication Root R46 to the 'Trusted Root Certification Authorities'.

Related information