The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

> It did not work. This is my local university (University of Seville).  I
> ask IT an person and they said that the way EAP certificate is stored in
> the directory is incompatible with Windows Phone 10 setting and they do
> not want to do anything about it (I think that I understood it well).

Well... If they tell you they don't want to make this work for you, then
I'm not sure how we can be of much help?

I see that their server cert does not contain a Extension CA:FALSE
(which some OSes seem to like). That would certainly be easy to fix, but
only they can do that. IF that is the actual issue.

> I tried also logging in with credentials of CSIC.ES and UCM.ES, where I
> have accounts, hoping for  the authentication slight differences, but
> non worked. The description of the eduroam settings are here
> 
>  
> 
> UCM.ES: https://www.ucm.es/ssii/eduroam

At least this one has a certificate which is very well-behaved and does
not raise any warnings. If Windows Phone doesn't like that certificate,
then all shame is on Windows 10 IMHO.

Your earlier comment on the us.es IT staff seems to indicate that they
actually know what exactly Windows Phone dislikes about the certificate.
That's great - I don't :-) If you can get the admins to tell us what the
issue is, we may be able to add checks for that condition in our tools...

> CSIC.ES does not have a clear description of their authentication method.

I have browsed through some documentation on their website and they have
TTLS-PAP as one supported method; they are using the TCS service for
their server certificates (just like ucm.es)

> I have found on Spanish Eduroam forum a link to Microsoft that states
> that EAP-TTLS (PAP) is supported on WP8.1 but it seems it is not:
> https://msdn.microsoft.com/en-us/library/dn643706.aspx.

I don't understand. That article lists TTLS-PAP just fine? But then
again, why are you now talking about WP 8.1 now? Earlier you say that
you have WP 10?

> Any suggestion?

More and clearer information would be nice.

Greetings,

Stefan Winter

> 
>  
> 
> Kind regards
> 
>  
> 
> Marcin Balcerzyk, Ph.D.
> 
> Unidad Ciclotron,
> 
> Centro Nacional de Aceleradores,
> 
> Universidad de Sevilla-CSIC-Junta de Andalucia,
> 
> Parque Tecnólogico Cartuja 93,
> 
> c/Thomas Alva Edison Nº 7,
> 
> 41092 Sevilla (Spain),
> 
> Tel.:  (+34)  954 460 553 ext. 226,
> 
> Fax:  (+34)   954 460 145,
> 
> mobile:(+34) 697 322 126
> 
> Skype: balcerzm
> 
>  
> 
> *From:*Alan Buxey 
> [mailto:A.L.M.Buxey AT lboro.ac.uk]
> *Sent:* sábado, 12 de diciembre de 2015 18:06
> *To:* Marcin Balcerzyk 
> <mbalcerzyk AT us.es>;
>  
> cat-users AT lists.geant.org
> *Subject:* Re: [[cat-users]] Installation of Eduroam for Windows Phone
> 8.1 and 10
> 
>  
> 
> Just install the CA as per your organisation's requirements and then use
> your username/password as per requirements. It'll work, securely, with
> no need for CAT App (which is a long long way away)
> 
> alan
> 
> To unsubscribe, send this message:
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> Or use the following link:
> https://lists.geant.org/sympa/sigrequest/cat-users


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature