Skip to main content

Noble Public Schools

#GoBears

Staff Personal Devices

For Staff · Tech Tips

Staff Personal Devices on District Wi-Fi

Staff may connect a personal phone, tablet, or laptop to the district’s User Wi-Fi network — but the network will treat your device exactly like a school device. Here’s what to expect, how to install the firewall certificate, and how to connect. Jump to the certificate download.

What to Expect Before You Connect

Allowed — But Not Encouraged

District Wi-Fi exists for school work on school devices. Staff may connect personal devices, but the network is filtered and locked down, and many things your device does at home simply won’t work here. If you want the experience your apps expect, cellular data is usually the better choice.

  • Staff only. Personal devices on district Wi-Fi are a staff privilege. Students may not connect personal devices to the school network — see the student policy below.
  • Internet, PowerSchool, and Webmail — that’s it. The User network reaches the internet, PowerSchool, and Webmail only. All other network locations, including printing, are blocked to protect district systems from viruses and intrusions.
  • Filtered and logged. All traffic passes through the district firewall and content filter, just like a school device, and is logged. Sites and apps blocked for school devices — social media and streaming among them — are blocked here too. The district’s Acceptable Use Policy applies on the User network.
  • Most phone apps won’t work correctly. Streaming, social media, gaming, personal messaging, and smart-home apps are built for open home networks. On a filtered school network, many will fail to load or misbehave — that’s normal and by design, not a problem with your device.
  • IT supports the network, not your device. The Technology team can’t configure, troubleshoot, or repair personal devices. Keep school work on your district-issued equipment.

Step 1: Install the Firewall Certificate

Do this first, before you join the network. The Noble firewall certificate lets your personal phone, tablet, or laptop browse on district Wi-Fi without constant security warnings — like Chrome’s “Your connection is not private” error on Google or YouTube. You can download it on cellular data or your home internet.

Download the Noble Firewall Certificate

Open this page on the device you plan to connect, then tap the button. It’s a small file named paloalto_2034.crt Download.

Download Certificate

Then follow the guide for your device

iPhone & iPad GuideStep-by-step walkthrough with a screenshot of every tap. Opens in a new page — no login needed. Windows 10 / 11 GuideStep-by-step walkthrough for a personal Windows laptop, with a screenshot of every click. Android, Mac, or OtherBasic install steps for Android, Mac, a personal Chromebook, and the Firefox browser are just below.
Watch the iPhone & iPad walkthrough herePlays on this page — click through each step

Walkthrough not loading? Open the iPhone & iPad guide in a new page.

Watch the Windows 10 / 11 walkthrough herePlays on this page — click through each step

Walkthrough not loading? Open the Windows 10 / 11 guide in a new page.

Android, Mac, Chromebook & Firefox — basic steps

Download the certificate first, then install it as a trusted CA certificate (certificate authority). Menu names vary a little by device and version.

AndroidSettings > Security > Install a certificate

Before you start: your phone needs a screen lock (PIN, pattern, or password) — Android won’t install a certificate without one.

  1. Tap Download Certificate above. The file saves to your Downloads folder.
  2. Don’t tap the downloaded file. Opening it from the browser or Files app gives a “Can’t install CA certificates” message — it has to be installed from Settings.
  3. Open Settings and find the certificate screen. The quickest way is to search Settings for “certificate”. Otherwise:
    Google Pixel / Motorola: Security & privacy > More security & privacy > Encryption & credentials > Install a certificate
    Samsung Galaxy: Security and privacy > More security settings > Install from device storage
  4. Choose CA certificate (not VPN, app, or Wi-Fi certificate).
  5. Android shows a warning that your data won’t be private — that’s the standard warning for any added certificate. Tap Install anyway.
  6. Enter your screen-lock PIN, pattern, or password.
  7. The file picker opens. Tap the menu and choose Downloads, then tap paloalto_2034.crt Download.
  8. A brief “CA certificate installed” message confirms it worked. Close and reopen Chrome.

Check that it installed: on the same Settings screen, open Trusted credentials (Samsung: View security certificates) and tap the User tab — the certificate is listed there. To remove it later, tap it there and choose Remove (Samsung: Uninstall).

Good to know: afterward Android may show a “Network may be monitored” notice — that’s normal with any added certificate. The certificate fixes warnings in the Chrome browser, but most other apps ignore user-installed certificates and may still fail on district Wi-Fi.

MacKeychain Access > Always Trust
  1. Download the certificate, then double-click paloalto_2034.crt Download in your Downloads folder. Keychain Access opens.
  2. If asked which keychain to use, choose login and click Add.
  3. In Keychain Access, select the login keychain and the Certificates tab, then double-click the certificate you just added (it shows a red “not trusted” mark).
  4. Expand Trust and set When using this certificate to Always Trust.
  5. Close the window and enter your Mac password to save. Quit and reopen your browser.

Safari and Chrome use this setting. Firefox does not — see the Firefox steps below.

Personal ChromebookSettings > Manage certificates
  1. Download the certificate — it saves to your Downloads folder.
  2. Open Settings > Privacy and security > Security > Manage certificates.
  3. Open the Authorities tab and click Import. (On newer versions: Local certificates > Custom > Installed by you > Import.)
  4. Choose paloalto_2034.crt Download.
  5. If asked, check Trust this certificate for identifying websites and click OK.
Firefox (any computer)Settings > Privacy & Security > Certificates
  1. Download the certificate.
  2. In Firefox, open Settings > Privacy & Security and scroll down to Certificates.
  3. Click View Certificates, open the Authorities tab, and click Import.
  4. Choose paloalto_2034.crt Download.
  5. Check Trust this CA to identify websites and click OK.

Once the certificate is installed and trusted, secure websites load without the repeated security warnings. Filtered sites and apps stay filtered — the certificate doesn’t unlock anything.

Who needs to install it manually? Personal and non-managed devices — phones and iPads, Mac computers, personal laptops — and the Firefox browser on any computer (Firefox keeps its own certificate store). District equipment generally gets it automatically: domain-joined computers through GPO, enterprise-enrolled Chromebooks through Google Admin, and district-managed iPads through MDM.

Step 2: Join the User Network

Connect to the Wi-Fi network named User and sign in with the same username and password you use on a district computer. The User network is for your own personal devices only.

Your Login Is Your Identity

Connecting a device with your login links that device to your account — everything done on it is tracked and filtered as you. Never sign in anyone else’s device, or a district-owned device, with your credentials. If a teacher connects a student’s device with a teacher login, that device filters the internet at the teacher level and its activity shows as the teacher’s. Only connect your own devices with your own login.

iPhone & iPadSettings > Wi-Fi
  1. Go to Settings > Wi-Fi and select the network User.
  2. Enter your district username and password.
  3. If iOS asks you to trust the network’s certificate, tap Trust.
  4. You’re connected. If you skipped Step 1, install the firewall certificate now.
AndroidWi-Fi settings
  1. Select the wireless network User.
  2. Set EAP method to PEAP and Phase 2 authentication to MSCHAPV2.
  3. Set CA certificate (some phones call it Server CA certificate) to Do not validate (or Don’t validate).
  4. Enter your district username in Identity — without the @nobleps.com (leave Anonymous Identity blank).
  5. Enter your password and tap Connect.
  6. You’re connected. If you skipped Step 1, install the firewall certificate now.

Screens vary by Android version — if yours doesn’t offer a Do not validate option and won’t accept your login, submit a workorder and Technology can walk you through it.

Personal Windows LaptopWi-Fi menu
  1. Open the Wi-Fi menu from the taskbar and select the network User.
  2. Enter your district username and password.
  3. If Windows asks whether to keep connecting, choose Connect.
  4. You’re connected. If you skipped Step 1, install the firewall certificate now.
Personal ChromebookJoin Wi-Fi network
  1. Select the wireless network User.
  2. Change EAP method to PEAP.
  3. Enter your district username in Identity — without the @nobleps.com.
  4. Enter your password (leave Anonymous Identity blank) and click Connect.
  5. You’re connected. If you skipped Step 1, install the firewall certificate now.
Connection acting up? Forget the network and rejoinQuick fix for saved-password problems

On an iPhone or iPad: go to Settings > Wi-Fi, tap the ⓘ next to User, choose Forget This Network, confirm Forget, then rejoin and sign in again. (Other devices have an equivalent “Forget network” option in Wi-Fi settings.) This clears a stale saved password — a common fix after you change your district password.

District-owned device not on the wireless? Don’t join it to the User network with your login — submit a workorder and Technology will join it to the NPS-Labs network for you.

Clocking In & Out

The time card system only works from inside the district network — your phone must be connected to school Wi-Fi to clock in or out. Cellular data won’t reach it. Since the filtered network makes many apps misbehave the rest of the day, we recommend this routine:

  1. Connect to Wi-Fi

    Join the User network when you arrive (see the join steps above — after the first time, your phone reconnects on its own).

  2. Clock in

    Open the time card system and clock in as usual.

  3. Turn Wi-Fi off

    Switch your phone’s Wi-Fi off for the day. Your apps go back to cellular data and behave normally.

  4. Turn Wi-Fi back on to clock out

    When it’s time to leave, switch Wi-Fi on, let your phone reconnect to User, and clock out.

Students & Personal Devices

Personal devices on district Wi-Fi are for staff only. Under Oklahoma Senate Bill 139 and district policy, students may not use personal electronic devices during the instructional day — bell to bell, including lunch and passing periods — and may not connect personal devices to the school Wi-Fi network. Students use school-issued Chromebooks only. Full details and family FAQs are in the student personal device policy article.

Questions or Stuck?

If you can’t connect, the certificate won’t install, or you have questions about Wi-Fi access, submit an IT workorder — it’s the fastest way to reach the Technology team.

More guides live in the Noble Schools Help Center.