The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

["Arthur, Joseph" <Joseph.Arthur AT courtauld.ac.uk>]

Hi,

We have been advised there is an issue with our certificate - would you please help with this as a matter of urgency.

Thanks & Regards

Joseph

The Courtauld Institute of Art, Somerset House, Strand, London, WC2R 0RN
www.courtauld.ac.uk

Now open at The Courtauld Gallery: Artists at Work
3 May 2018 – 15 July 2018

-----Original Message-----
From: eduroamUK <eduroamuk AT jisc.ac.uk> 
Sent: 26 July 2018 11:53
To: Arthur, Joseph <Joseph.Arthur AT courtauld.ac.uk>
Cc: Tickets Service <Tickets.Service AT jisc.ac.uk>; Eduroam Support <jrs-support AT jisc.ac.uk>
Subject: RE: Enquiry (Ref:IN:00333275) eduroam Certificate issues and auth problems - The Courtauld Institute of Art

Hello Joseph,

Just to add to Nik's e-mail, I've attached a screenshot of your admin view of CAT. This shows the server certificate that has been uploaded and the current CA root and intermediate certs.

Note that your CAT account was originally created for ranjeet.kumar AT courtauld.ac.uk  I trust you still have access to the system?

Regards,

Ed
--
Edward Wincott
eduroam(UK) Service Manager, Jisc
T: 01235 822378
https://community.ja.net/library/janet-services-documentation/eduroam
www.eduroam.ac.uk
Twitter @eduroamuk – for news, information, pictures and fun

When replying to this e-mail is it essential to preserve the (Ref:IN:xxxxxxxx) text in the subject line and to always use 'Reply All'


-----Original Message-----
From: Nik Mitev
Sent: 26 July 2018 09:40
To: Arthur, Joseph <Joseph.Arthur AT courtauld.ac.uk>
Cc: Tickets Service <Tickets.Service AT jisc.ac.uk>; Eduroam Support <jrs-support AT jisc.ac.uk>
Subject: Re: Eduroam Network (Ref:IN:00333275)

Hi Joseph,

The wrong certificate is still in the CAT profile - please log in at cat.eduroam.org and update the profile to contain the correct certificates, then save the changes and download the updated executable and try using that on the device (after removing any previously installed eduroam profiles on it).

The eduroam UK team does not develop or support CAT, if you have any issues with it you can report them to cat-users AT lists.geant.org The server certificate used instead of the CA root one in the CAT profile is an obvious issue which should be resolved but may not be the only one.

Some good information on use of certificates in eduroam can be found here:
https://services.geant.net/sites/cbp/Knowledge_Base/Wireless/Documents/cbp-33_server-certificate-practices-in-eduroam.pdf
and here:
https://wiki.geant.org/display/H2eduroam/EAP+Server+Certificate+considerations

Finally, while we do try to help with any eduroam related issues, the scope of the support this team is required to provide covers the NRPS and their interactions with member OPRSes. Members should have their own in-house or outsourced expertise on running their chosen type of RADIUS server and deploying the service to end user devices.

Regards,
Nik

-------- Original Message --------
From: Arthur, Joseph
Sent: Wednesday, Jul 25, 2018 5:33 PM BST
To: Nik Mitev
Cc: Tickets Service; jrs-support AT jisc.ac.uk
Subject: Eduroam Network (Ref:IN:00333275)

Hi Nik,

I have removed all certs for the Eduroam service and the same issue happens with this device. I've removed both Quovadis and radius entries and run the windows 7 trouble shooter. Other devices are connecting to the SSID without any issues.

We'd like to get this resolved before 3pm tomorrow afternoon, the gentleman who owns the laptop will be attending another institution and requires it to be returned for this time.

Thanks & Regards

Joseph

The Courtauld Institute of Art, Somerset House, Strand, London, WC2R 0RN www.courtauld.ac.uk <http://www.courtauld.ac.uk>

Now open at The Courtauld Gallery: Artists at Work <https://courtauld.ac.uk/gallery/what-on/exhibitions-displays>
3 May 2018 – 15 July 2018


-----Original Message-----
From: Nik Mitev <nik.mitev AT jisc.ac.uk>
Sent: 25 July 2018 15:41
To: Arthur, Joseph <Joseph.Arthur AT courtauld.ac.uk>
Cc: Tickets Service <Tickets.Service AT jisc.ac.uk>; jrs-support AT jisc.ac.uk <mailto:jrs-support AT jisc.ac.uk>
Subject: Re: Eduroam Network (Ref:IN:00333275)

Hi Joseph,

You have uploaded the server certificate to CAT, rather than the root CA one. You need to delete that certificate from the profile and upload he root certificates for the issuing CA instead, so when the server presents its certificate on connection the device will have trust preinstalled. As is, the CAT profile will not work.

Regards,
Nik

-------- Original Message --------
From: Jisc Remedyforce
Sent: Wednesday, Jul 25, 2018 3:27 PM BST
To: jrs-support AT jisc.ac.uk <mailto:jrs-support AT jisc.ac.uk>
Subject: Eduroam New Enquiry 00333275 : Eduroam Network has been logged

Enquiry # (Ref:IN:00333275) with the following details has been created:

Subject: Eduroam Network
Open Date: 25/07/2018 15:23
Caller Email: joseph.arthur AT courtauld.ac.uk <mailto:joseph.arthur AT courtauld.ac.uk> Caller Name: Arthur, Joseph
Enquiry: Hi,

We appear to be having an issue connecting to the Eduroam network with a device B4:b6:76:74:10:9A. We have removed the Network from the device and readded but to no avail.

We have installed the certs. And config. via the installer but this does not appear to work. We have recently added a new certificate to our Aruba controller, could this be part of the cause??

Please advise at you earliest convenience.

Thanks & Regards

Joseph

The Courtauld Institute of Art, Somerset House, Strand, London, WC2R 0RN www.courtauld.ac.uk <http://www.courtauld.ac.uk>

Now open at The Courtauld Gallery: Artists at Work
3 May 2018 – 15 July 2018

Donate to The Courtauld Annual Fund www.courtauld.ac.uk/annualfund <http://www.courtauld.ac.uk/annualfund>





The Courtauld Institute of Art is a company limited by guarantee (registered in England and Wales, number 04464432) and an exempt charity. SCT Enterprises Limited is a limited company (registered in England and Wales, number 3137515). Their registered offices are at Somerset House, Strand, London WC2R 0RN. The sale of items related to The Courtauld Gallery and its collections is managed by SCT Enterprises Limited, a wholly owned subsidiary of The Courtauld Institute of Art.

Link to details (Remedyforce login required):
https://bmcservicedesk.eu3.visual.force.com/apex/BMCServiceDesk__RemedyforceConsole?record_id=a2j1r00000BIufy&objectName=Incident__c


--
Nik Mitev
eduroam(UK) Development Specialist, Jisc www.eduroam.ac.uk <http://www.eduroam.ac.uk> Twitter @eduroamuk – for news, information, pictures and fun

When replying to this e-mail is it essential to preserve the
(Ref:IN:xxxxxxxx) text in the subject line and to always use 'Reply All'


--
Nik Mitev
eduroam(UK) Development Specialist, Jisc www.eduroam.ac.uk Twitter @eduroamuk – for news, information, pictures and fun

When replying to this e-mail is it essential to preserve the
(Ref:IN:xxxxxxxx) text in the subject line and to always use 'Reply All'

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.

Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.