Configure Eduroam for Windows XP

Open the Wireless Network Connection box by left clicking on the network icon in the task tray:

Click the "Change the order of preferred networks" link:

If eduroam is present in the "Preferred networks", remove it using the "Remove" button.
Click "Add" to create a new connection to eduroam.

Fill in the SSID to be eduroam, set WPA2 and AES as below, then click the Authentication Tab on the dialog box:

Change EAP type to be Protected EAP (PEAP), untick the Authenticate as computer box, then click the "Properties" button:

Ensure form looks like the following:
Tick Validate server certificate,
Set Connect to these servers to be tools.its.waikato.ac.nz
Tick the UTN-UserFirst-Hardware entry in the Trusted Root Certification Authorities
Set Authentication Method to be Secured Password (EAP-MSCHAP v2)
Finally, click the Configure button

Untick the box, and click OK four times to save all of the settings and exit the network configuration screens.

Windows will then try to automatically connect, and will pop up a notification window in the bottom right hand corner. Click it.

Enter your username@waikato.ac.nz and your password you use to log onto windows (The domain password). Click OK.

A successful connection will show this: