The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hi,

> we moved already to cat.eduroam.org and we still get the SmartScreen
> Message. So are we still using an old base even if we moved already?

My reaction was to the OP in the thread - his screenshot clearly
indicated that his browser was at cat.eduroam.de.

I do see that @rz.uni-augsburg.de has a native CAT 2.0 profile on
cat.eduroam.org.

That one most certainly doesn't trigger a SmartScreen warning.

Also note that your local helpdesk pages do speak of SmartScreen, but
they were made against the old CAT 1.x installation on .de - the
SmartScreen splash in those screenshots states "Unbekannter Herausgeber"
(which means unsigned; our installers are digitally signed by "GEANT
Association").

I suggest you try an installation again. Only if a freshly downloaded
executable directly from cat.eduroam.org shows the SmartScreen warning,
then something is indeed wrong on our side.

Greetings,

Stefan Winter

> 
> Greetings,
> 
> Lukas Wringer
> 
> Am Dienstag, den 04.12.2018, 10:00 +0100 schrieb Stefan Winter:
>> Hello,
>>
>>> is there any solution available for the problem with Windows Smart-
>>> Screen?
>>
>> Sure. You are still using the German eduroam CAT instance. That one
>> is
>> based on the 1.1.x codebase, and does not digitally sign installers
>> with
>> an EV code signing certificate. That lack of signature generates the
>> SmartScreen warning.
>>
>> DFN is discontinuing their instance in favour of the international
>> one
>> on https://cat.eduroam.org. You should have received plenty of ahead
>> notice and documentation on how to switch.
>>
>> Once you have switched to cat.eduroam.org, the installers will pass
>> the
>> Windows SmartScreen filters.
>>
>> Greetings,
>>
>> Stefan Winter
>>
>>


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature