The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

> We have been advised there is an issue with our certificate - would you
> please help with this as a matter of urgency.

From reading the below, you indeed seem to have a certificate issue, and
maybe an issue relating to access permissions to the CAT, but not an
issue with the CAT website itself.

You should continue talking to JRS Support: if you do not have access
privileges to eduroam CAT any more, they can re-initialise the access
for you.

Your issue should be resolvable by replying to the mail below "I
trust you still have access to the system?" with a "Sadly, no." and then
JRS support will take it from there...

Greetings,

Stefan Winter

> 
> Thanks & Regards
> 
> Joseph
> 
> The Courtauld Institute of Art, Somerset House, Strand, London, WC2R 0RN
> www.courtauld.ac.uk <http://www.courtauld.ac.uk>
> 
> Now open at The Courtauld Gallery: Artists at Work
> <https://courtauld.ac.uk/gallery/what-on/exhibitions-displays>
> 3 May 2018 – 15 July 2018
> 
> 
> -----Original Message-----
> From: eduroamUK 
> <eduroamuk AT jisc.ac.uk>
> Sent: 26 July 2018 11:53
> To: Arthur, Joseph 
> <Joseph.Arthur AT courtauld.ac.uk>
> Cc: Tickets Service 
> <Tickets.Service AT jisc.ac.uk>;
>  Eduroam Support
> <jrs-support AT jisc.ac.uk>
> Subject: RE: Enquiry (Ref:IN:00333275) eduroam Certificate issues and
> auth problems - The Courtauld Institute of Art
> 
> Hello Joseph,
> 
> Just to add to Nik's e-mail, I've attached a screenshot of your admin
> view of CAT. This shows the server certificate that has been uploaded
> and the current CA root and intermediate certs.
> 
> Note that your CAT account was originally created for
> ranjeet.kumar AT courtauld.ac.uk
>  
> <mailto:ranjeet.kumar AT courtauld.ac.uk>
>  I
> trust you still have access to the system?
> 
> Regards,
> 
> Ed
> --
> Edward Wincott
> eduroam(UK) Service Manager, Jisc
> T: 01235 822378
> https://community.ja.net/library/janet-services-documentation/eduroam
> www.eduroam.ac.uk <http://www.eduroam.ac.uk>
> Twitter @eduroamuk – for news, information, pictures and fun
> 
> When replying to this e-mail is it essential to preserve the
> (Ref:IN:xxxxxxxx) text in the subject line and to always use 'Reply All'
> 
> 
> -----Original Message-----
> From: Nik Mitev
> Sent: 26 July 2018 09:40
> To: Arthur, Joseph 
> <Joseph.Arthur AT courtauld.ac.uk>
> Cc: Tickets Service 
> <Tickets.Service AT jisc.ac.uk>;
>  Eduroam Support
> <jrs-support AT jisc.ac.uk>
> Subject: Re: Eduroam Network (Ref:IN:00333275)
> 
> Hi Joseph,
> 
> The wrong certificate is still in the CAT profile - please log in at
> cat.eduroam.org and update the profile to contain the correct
> certificates, then save the changes and download the updated executable
> and try using that on the device (after removing any previously
> installed eduroam profiles on it).
> 
> The eduroam UK team does not develop or support CAT, if you have any
> issues with it you can report them to 
> cat-users AT lists.geant.org
> <mailto:cat-users AT lists.geant.org>
>  The server certificate used instead
> of the CA root one in the CAT profile is an obvious issue which should
> be resolved but may not be the only one.
> 
> Some good information on use of certificates in eduroam can be found here:
> https://services.geant.net/sites/cbp/Knowledge_Base/Wireless/Documents/cbp-33_server-certificate-practices-in-eduroam.pdf
> and here:
> https://wiki.geant.org/display/H2eduroam/EAP+Server+Certificate+considerations
> 
> Finally, while we do try to help with any eduroam related issues, the
> scope of the support this team is required to provide covers the NRPS
> and their interactions with member OPRSes. Members should have their own
> in-house or outsourced expertise on running their chosen type of RADIUS
> server and deploying the service to end user devices.
> 
> Regards,
> Nik
> 
> -------- Original Message --------
> From: Arthur, Joseph
> Sent: Wednesday, Jul 25, 2018 5:33 PM BST
> To: Nik Mitev
> Cc: Tickets Service; 
> jrs-support AT jisc.ac.uk
>  
> <mailto:jrs-support AT jisc.ac.uk>
> Subject: Eduroam Network (Ref:IN:00333275)
> 
> Hi Nik,
> 
> I have removed all certs for the Eduroam service and the same issue
> happens with this device. I've removed both Quovadis and radius entries
> and run the windows 7 trouble shooter. Other devices are connecting to
> the SSID without any issues.
> 
> We'd like to get this resolved before 3pm tomorrow afternoon, the
> gentleman who owns the laptop will be attending another institution and
> requires it to be returned for this time.
> 
> Thanks & Regards
> 
> Joseph
> 
> The Courtauld Institute of Art, Somerset House, Strand, London, WC2R 0RN
> www.courtauld.ac.uk <http://www.courtauld.ac.uk>
> <http://www.courtauld.ac.uk>
> 
> Now open at The Courtauld Gallery: Artists at Work
> <https://courtauld.ac.uk/gallery/what-on/exhibitions-displays>
> 3 May 2018 – 15 July 2018
> 
> 
> -----Original Message-----
> From: Nik Mitev 
> <nik.mitev AT jisc.ac.uk>
> Sent: 25 July 2018 15:41
> To: Arthur, Joseph 
> <Joseph.Arthur AT courtauld.ac.uk>
> Cc: Tickets Service 
> <Tickets.Service AT jisc.ac.uk>;
>  
> jrs-support AT jisc.ac.uk
> <mailto:jrs-support AT jisc.ac.uk>
>  
> <mailto:jrs-support AT jisc.ac.uk>
> Subject: Re: Eduroam Network (Ref:IN:00333275)
> 
> Hi Joseph,
> 
> You have uploaded the server certificate to CAT, rather than the root CA
> one. You need to delete that certificate from the profile and upload he
> root certificates for the issuing CA instead, so when the server
> presents its certificate on connection the device will have trust
> preinstalled. As is, the CAT profile will not work.
> 
> Regards,
> Nik
> 
> -------- Original Message --------
> From: Jisc Remedyforce
> Sent: Wednesday, Jul 25, 2018 3:27 PM BST
> To: 
> jrs-support AT jisc.ac.uk
>  
> <mailto:jrs-support AT jisc.ac.uk>
> <mailto:jrs-support AT jisc.ac.uk>
> Subject: Eduroam New Enquiry 00333275 : Eduroam Network has been logged
> 
> Enquiry # (Ref:IN:00333275) with the following details has been created:
> 
> Subject: Eduroam Network
> Open Date: 25/07/2018 15:23
> Caller Email: 
> joseph.arthur AT courtauld.ac.uk
> <mailto:joseph.arthur AT courtauld.ac.uk>
> <mailto:joseph.arthur AT courtauld.ac.uk>
>  Caller Name: Arthur, Joseph
> Enquiry: Hi,
> 
> We appear to be having an issue connecting to the Eduroam network with a
> device B4:b6:76:74:10:9A. We have removed the Network from the device
> and readded but to no avail.
> 
> We have installed the certs. And config. via the installer but this does
> not appear to work. We have recently added a new certificate to our
> Aruba controller, could this be part of the cause??
> 
> Please advise at you earliest convenience.
> 
> Thanks & Regards
> 
> Joseph
> 
> The Courtauld Institute of Art, Somerset House, Strand, London, WC2R 0RN
> www.courtauld.ac.uk <http://www.courtauld.ac.uk>
> <http://www.courtauld.ac.uk>
> 
> Now open at The Courtauld Gallery: Artists at Work
> 3 May 2018 – 15 July 2018
> 
> Donate to The Courtauld Annual Fund www.courtauld.ac.uk/annualfund
> <http://www.courtauld.ac.uk/annualfund>
> <http://www.courtauld.ac.uk/annualfund>
> 
> 
> 
> 
> 
> The Courtauld Institute of Art is a company limited by guarantee
> (registered in England and Wales, number 04464432) and an exempt
> charity. SCT Enterprises Limited is a limited company (registered in
> England and Wales, number 3137515). Their registered offices are at
> Somerset House, Strand, London WC2R 0RN. The sale of items related to
> The Courtauld Gallery and its collections is managed by SCT Enterprises
> Limited, a wholly owned subsidiary of The Courtauld Institute of Art.
> 
> Link to details (Remedyforce login required):
> https://bmcservicedesk.eu3.visual.force.com/apex/BMCServiceDesk__RemedyforceConsole?record_id=a2j1r00000BIufy&objectName=Incident__c
> 
> 
> --
> Nik Mitev
> eduroam(UK) Development Specialist, Jisc www.eduroam.ac.uk
> <http://www.eduroam.ac.uk> <http://www.eduroam.ac.uk> Twitter @eduroamuk
> – for news, information, pictures and fun
> 
> When replying to this e-mail is it essential to preserve the
> (Ref:IN:xxxxxxxx) text in the subject line and to always use 'Reply All'
> 
> 
> --
> Nik Mitev
> eduroam(UK) Development Specialist, Jisc www.eduroam.ac.uk
> <http://www.eduroam.ac.uk> Twitter @eduroamuk – for news, information,
> pictures and fun
> 
> When replying to this e-mail is it essential to preserve the
> (Ref:IN:xxxxxxxx) text in the subject line and to always use 'Reply All'
> 
> Jisc is a registered charity (number 1149740) and a company limited by
> guarantee which is registered in England under Company No. 5747339, VAT
> No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower
> Hill, Bristol, BS2 0JA. T 0203 697 5800.
> 
> Jisc Services Limited is a wholly owned Jisc subsidiary and a company
> limited by guarantee which is registered in England under company number
> 2881024, VAT number GB 197 0632 86. The registered office is: One Castle
> Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.
> 
> To unsubscribe, send this message:
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> Or use the following link:
> https://lists.geant.org/sympa/sigrequest/cat-users


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature