This page will walk you through troubleshooting some of the most common connection issues based on device type.

Apple OS X
Apple iOS

Kindle Fire
Microsoft Surface RT

Apple OS X

  • Unsupported OS
    • If your version of OS X is not a Supported Operating System by Apple or Cornell, you will need to upgrade to a supported version prior to getting a permanent network connection. In most cases this requires an Internet connection. To accomplish this, we will grant you a temporary connection that will allow you to download an upgrade. To arrange this temporary connection, please enter a Work-Order or contact the Office of Information Technology at 4357.
  • Can't Download the XpressConnect App or Certificate
    • Often, after you connect to the CornellOpenWifi network, OS X will automatically open the connection web page in a limited-functionality browser window. This process will not allow you to download the XpressConnect application. In order to complete the process, close this limited-functionality window and open a web browser (Safari and Chrome are the most popular).

Apple iOS

  • You Receive the Error "Too Many Redirects"
    • This is caused by having Cookies disabled. You will need to enable Cookies through the Safari applet in System Settings and restart the connection process.  
  • Connection to CornellSecure fails; you cannot reconnect to CornellOpenWifi or CornellOpenWifi to reregister
    • Open Settings
    • Open General
    • Scroll to the bottom of the General settings and select the Profile applet
    • Open the listed configuration profile (most likely Employee Devices)
    • Choose Delete Profile and enter the lock screen code when prompted
    • *It is sometimes necessary to restart the device prior to reconnecting
    • Open Settings
    • Open WiFi and connect to CornellOpenWifi
    • Open Safari and complete the instructions listed


  • Using the Dolphin Browser
    • The GetConnected process may not complete when using Dolphin browser.  Please use the default Android browser and restart the process.
  • Credential Storage Bug
    • The xPressConnect app fails with a message regarding the Android Credential Storage bug
      • Change your screen lock to a "pattern" with a PIN backup (make sure you know what the PIN is)
      • Reboot your phone
      • Enter your pattern incorrectly several times - eventually you should be prompted to log in
      • Try logging in with the Gmail account your phone is synced with
      • If that does not work, go back to your lock screen and choose the PIN backup option from the bottom
      • Enter your correct PIN code to unlock the screen - you should immediately be taken to the screen lock settings.
      • Choose your preferred screen lock method
      • Connect to the CornellOpenWifi network, open your browser, and complete the authentication process.  You can delete any certificates relating to your phone if there are any stored.
      • Note: in some cases, older Android phones will not give an option to set a PIN backup.  In these cases, use the Gmail account with which your phone is synced to unlock after entering a bad pattern.  
        • It may also be necessary to clear Credential storage under Settings -> Security

Kindle Fire

  • If after downloading the android.netconfig file, the file will not open, it may be necessary to use the link for the alternate option to open the link.  This should allow you to open the file and configure connection to CornellSecure
    • android-alternate

Microsoft Surface RT

  • Follow these instructions for SurfaceRT configuration
    • Ensure that the system's date & time are correctly configured
    • Join the CornellOpenWifi network
    • Launch the web browser and begin the connection process
    • When prompted with the Choose your Device type screen, choose Other Operating Systems
    • Download & install the CA Certificate
      • Install the certificate to the Local Machine (not Current User)
      • Browse to install in the Trusted Root Certification Authorities Certificate Store
    • Go back to the web browser and click "Step 2: Install Your Certificate"
      • Install this certificate to Current User
      • When prompted, enter your Cornell College password
      • Allow the certificate location to be automatically selected
    • From the Start menu, open Control Panel
    • Open Network and Sharing Center
    • Choose Set up a new connection or network
    • Select Manually connect to a wireless network
      • Network Name: CornellSecure
      • Security Type: WPA2-Enterprise
      • Check Start this connection automatically
      • Click Next
      • Click Change connection settings
      • Click the Security tab
      • Choose a Network authentication method of Microsoft: Smart Card or Other Certificate
      • Click Settings
      • Make sure Use a certificate on this computer is selected
      • Make sure that Verify the server's identity... is checked
      • Enter in the validate using these servers box
      • Check the Cornell College Get Connected CA1 certificate
      • Check "Don't prompt user..."
      • Click OK twice, followed by Close
    • Join the CornellSecure network
      • If prompted with If you expected to find CornellSecure..., click Connect


  • Windows Cannot Extract the XpressConnect EXE From the CAB File
    • This is usually caused by the Language for non-Unicode Programs being set to something other than English (United States). Follow these instructions to correct this issue.
      • Open Control Panel
      • Open Region and Language
      • Select the Administrative tab
      • Language for non-Unicode Programs select Change System Locale
      • Select English (United States)
      • Select OK twice
      • Reboot your computer
      • Restart the connection process
      • Once complete you can set your Language for non-Unicode Programs back to the previous setting
  • Can't Load a Web Page After Connecting to the CornellOpenWifi network
    • This can be caused by having DNS and DHCP configured statically. Please check your DNS and DHCP settings and verify that they are set to automatic. 
  • Your Computer Uses the Webroot Antivirus Application
    • The Webroot application prevents the XpressConnect application from installing our root certificate. Because of this you must install it manually.
      • Download the zipped root certification and save it to your desktop
      • Extract the contents of the zip file to the desktop
      • Select Start
      • Select Run
      • Enter mmc
      • Select OK
      • Select File
      • Select Add/Remove Snap-in
      • Select Certificate
      • Select Add
      • Select Computer Account
      • Select Next
      • Select Finish
      • Select OK
      • Expand Certificate (Local Computer)
      • Trusted Root Certificate Authorities
      • Right click on Certificates
      • Select All Tasks
      • Select Import
      • Browse to the downloaded certificate file
      • Select Next twice
      • Select Finish
      • Exit out of the MMC console
      • Restart the connection process.

If you are having problems connecting to wireless network assigned to your device, please follow the below instructions:

  1. delete/forget the wireless connection
  2. Connect to the CornellOpenWifi wireless network
  3. Open any web browser
  4. You should automatically be redirected to If not please go to
  5. Follow the instructions presented during the connection process

If you have any questions or i need help installing any applications, please contact the Information Technology Help Desk at extension 4357 or submit a Work Order Request and our staff will assist you as soon as possible.