The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Hi Mark

W dniu 31.01.2013 16:40, Mark.Curtin pisze:

Hi Guys,

 

Let me first congratulate you on a fantastic utility, I am currently testing for Limerick Institute of Technology. Just one question though, can it be configured to use AES (WPA2) instead of TKIP ? I know this can be done retrospectively by manually editing the settings but is there any way to build the client with it?

Hi Mark,

   But we do configure for AES. On all sysems except for Windows both AES and TKIP are enabled, for Windows we install two profiles "eduroam" and "eduroam (TKIP)". The first one is AES and the second TKIP. The first one has higher priority. If we did not configure the TKIP profile as well, then the user would not get connected at a TKIP-only site. Since TKIP-only sites are "illegal" in eduroam as of January 1st, 2013, in principle we could drop this TKIP profile, but I would not be so optimistic as to believe that ther are no more TKIP sites out there. Perhaps in a year we can drop that.

Windows XP is an exception, it can only accept one profile, so we just install AES.

Cheers,

   Tomasz

 

Regards,

 

Mark Curtin

Senior Technical Officer

Network Support Group

Computer Services

Limerick Institute of Technology

Phone:    +353 61 293316

Mobile:    +353 87 7749396

Fax:        +353 61 293854

E-Mail:    mark.curtin AT lit.ie