Quick Answer
School and workplace networks typically use EAP (WPA2-Enterprise) authentication rather than a simple password, requiring a username, password, and sometimes a security certificate. Go to the network’s settings, select the correct EAP method (usually PEAP), and enter your organization’s login credentials rather than a shared Wi-Fi password.

Common Causes
Enterprise Wi-Fi connections fail most often because the wrong EAP method is selected, a required security certificate hasn’t been installed, the device isn’t enrolled in the organization’s management system when enrollment is required, or your account credentials have expired or need a password reset through the school or employer’s own system.
Fix Steps
Step 1: Get the correct connection details from IT
Ask your school or employer’s IT department for the exact EAP method (commonly PEAP, EAP-TLS, or EAP-TTLS), the server certificate if one is required, and confirmation of whether the Chromebook needs to be enrolled first.
Step 2: Select the network and choose EAP settings
Click the network name in Quick Settings, and when prompted, select the EAP method your IT department specified rather than leaving it on a default guess.
Step 3: Enter your organizational credentials
Use your school or work username and password, not a general Wi-Fi password. These networks authenticate per-user rather than with one shared network key.
Step 4: Install a required certificate
If IT provides a certificate file, open it from the Files app or a link they send, which prompts ChromeOS to import it under Settings > Security and privacy > Manage certificates before the network will accept the connection.
Step 5: Check if the device needs enrollment first
Some organizations only allow enrolled, managed devices onto their network. If you’re seeing “This device is locked by its administrator” or similar messaging, that’s a policy restriction, not a Wi-Fi configuration problem, and needs to be resolved with IT directly.
Step 6: Reset the connection and retry
Click the network, select “Forget,” then reconnect from scratch with the correct EAP settings. A stale, partially configured connection profile is a common cause of repeated authentication failures.
Still Not Fixed?
If credentials and certificates are all correct but the connection still fails, the issue is likely on the network’s side, such as a device limit per account or a firewall rule blocking personal devices. This requires your IT department to check server-side logs, which isn’t something fixable from the Chromebook alone.
FAQ
Why does my personal Wi-Fi work fine but school Wi-Fi doesn’t?
Personal networks use simple WPA2-Personal with one shared password, while school and work networks typically use WPA2-Enterprise, which authenticates each user individually and requires different setup steps entirely.
Do I need to be enrolled in a management system to use campus Wi-Fi?
It depends on the organization’s policy. Some schools allow any device with valid credentials, while others restrict network access to devices enrolled through Google Admin console or a similar system.
Can a VPN help if the school network blocks certain sites?
Sometimes, though many managed networks block VPN traffic entirely as a policy. See our guide on setting up a VPN on a Chromebook for how it works on unrestricted networks.

LOG 1 report