cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Re: [cat-users] CA Certificate File

From: A.L.M.Buxey AT lboro.ac.uk
To: Tomasz Wolniewicz <twoln AT umk.pl>
Cc: "cat-users AT geant.net" <cat-users AT geant.net>, Paul Mitchell <paul.mitchell AT nag.co.uk>
Subject: Re: [cat-users] CA Certificate File
Date: Mon, 14 Apr 2014 14:50:38 +0000
List-archive: <http://mail.geant.net/pipermail/cat-users/>
List-id: "The mailing list for users of the eduroam Configuration Assistant Tool \(CAT\)" <cat-users.geant.net>

Hi,

> If you wanted to replace the CA certificate then this would be a bit
> of a disaster as all your current clients will loose connectivity.
> Then you would need to change the certificate in CAT as well.

well, as someone speaking with experience of a CA change for a campus
environment with over 18000 wireless users (all using 802.1X with eduroam
profile) and > 8000 wired outlets using 802.1X in multiple facilities,
changing a root CA used with your authentication neednt be a disaster
- it just needs to be very well planned and communicated!! :-)

(our change-over went well. very few issues or service desk calls 8-) )

alan

[cat-users] CA Certificate File, Paul Mitchell, 04/14/2014
- Re: [cat-users] CA Certificate File, Tomasz Wolniewicz, 04/14/2014
  - Re: [cat-users] CA Certificate File, A . L . M . Buxey, 04/14/2014