The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Alan Buxey <alan.buxey AT gmail.com>]

hi,

yes, unfortunately most mobile platforms have issues with stored profile passwords if the user has changed them - repeated failures to auth - usually remeied easily by just rejoining the

network after forgetting it (at that point, if not using a deployment tool such as eduroamCAT, the new connection will be without checking the RADIUS cert correctly).

so, use EAP-TLS certs instead (self-enroll using their current user/password to get a cert that is only for wireless) - Aruba clearpass etc etc

or maybe look at your password policy - why changing them every 3 months? the current security best practices is to ensure the password is strong and ONLY change it if

there is a reason to believe that its been compromised, use multi factor auth where possible etc.

https://www.ncsc.gov.uk/articles/problems-forcing-regular-password-expiry

alan