The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Michael Davis <davis AT udel.edu>]

Thank you, this worked on iOS 9 and iOS 10 by using the MacOS Sierra 
configuration.

thanks
mike

On 8/2/17 3:56 AM, Stefan Winter wrote:
> Hello,
>
> > We're just starting to explore EAP-TLS on campus and I created a CAT
> > profile to test also.
> >
> > I noticed that iOS CAT profiles (5, 6, and 7+ are listed) don't generate
> > TLS installers, is that going to be a limitation for the future, or will
> > CAT
> > soon support EAP-TLS in iOS 10+ ?
> Turning this on is a one-line change. The issue is that we turned it off
> on purpose because iOS had issues with it where MacOS X did not:
>
> Our installers configure the use of EAP-TLS, but do not include the
> actual client certificate. This has to get onto the system in a
> different way.
>
> On macOS, when you connect to a Wi-Fi network with EAP-TLS enabled, the
> OS will ask you which of your certificates in Keychain should be used
> for the access. That's fine.
>
> On iOS, only in-profile information is used when connecting - and since
> the client cert isn't found in-line, this won't work.
>
> This may have changed recently of course. Feel free to try and download
> the macOS installer with an iOS device - it will work there as well. If
> you have any success in connecting to eduroam, we can flip the EAP-TLS
> support switch for iOS in short notice.
>
> Greetings,
>
> Stefan Winter


--
 Mike Davis
 Systems Programmer V
 NSS - University of Delaware  - 302.831.8756
 Newark, DE  19716         Email 
davis AT udel.edu