The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Te blue icons "I" next to the certificates, say that you have only uploaded the intermediate certificate and no root certificate.
It also seems that you have probably uploaded your server certificate, which is not needed, but which will not do any harm.
To make the profile complete you should add the two certificates completeng the TCS chain. you can find them here:

http://www.terena.org/activities/tcs/repository/UTN-USERFirst-Hardware.pem

and
https://support.comodo.com/index.php?_m=downloads&_a=viewdownload&downloaditemid=87
(I do not suggest that you use Terena as a link for the root, since TERENA does not even use https to provide it.

Tomasz

W dniu 2013-10-03 12:18, Jaspal Dhalley pisze:

Alan

 

Many thanks for your reply. Myself and my colleague Hassan have now managed to configure the global main page and it has accepted this.

 

We are now configuring a profile for “Ms Windows” in which we are experiencing a problem when entering the EAP details for the profile.

 

Although we have entered in the chained CA Cert which is the same as the one on the global page, however although it accepts on the global page, it doesn’t accept on the profile page.

 

I have attached some screenshots so that you can see what we are doing and hopefully point us in the right direction.

 

Thanks

Jas.

 

____________________

Jaspal Dhalley

Network & Telecommunications Officer

University Of Westminster

115 New Cavendish Street

London

W1W 6UW

 

E:  J.S.Dhalley AT Westminster.ac.uk

P:  020 3506 4005

F:  020 7911 5093

W:  www.Westminster.ac.uk

 

_________________________________

This e-mail and its attachments are intended for the above named only and may be confidential. If they have come to you in error you must not copy or show them to anyone, nor should you take any action based on them, other than to notify the error by replying to the sender.

 Please consider the environment, do you really need to print this email?

 

 

From: Alan Buxey [mailto:A.L.M.Buxey AT lboro.ac.uk]
Sent: 27 September 2013 11:49
To: Jaspal Dhalley; cat-users AT geant.net
Cc: Daniel Halter; Hassan Olusesi; Carl Lobo
Subject: Re: [cat-users] Issues with configuration assistance tool

 

Hi


You need to define a default language for all the parts of your profile. . this means UK *and* a default for those who have another locale set.

You also need to upload the correct certificate chain for your CA settings. From a brief glance at your screenshot it appears that you have only uploaded the TERENA SSL intermediate.

I have asked a couple of times in the past for a feature request so that if someone uploads a terena radius cert then the system automatically adds the full chain. .. after all is a TERENA system. ... I could foresee plenty of site admins who don't have knowledge of PKI coming along.


alan
--
Sent from my Android device with K-9 Mail. Please excuse my brevity.

The University of Westminster is a charity and a company limited by guarantee. Registration number: 977818 England. Registered Office: 309 Regent Street, London W1B 2UW.

This message and its attachments are private and confidential. If you have received this message in error, please notify the sender and remove it and its attachments from your system.

-- 
Tomasz Wolniewicz    
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.: +48-693-032-576