The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <address@concealed>]

Hi Robert,

     First of all, when you say that the information for the user is
limited to the name of the profile - this is not quite true. Indeed on
the selection lit this is all that you see, but once you select  profile
you can see additional information if the admin as provided it. See
https://cat.eduroam.org/?idp=1

   Secondly, got that link to work you do not need to make profile
visible, however to get the correct link out of CAT, currently you need
to do some hacking, which should not be needed and we must correct that
in the future.

When you define a profile, you get the button "Installer Fine-Tuning and
Download.

From the resulting page you can download the installers and you can also
link to them by something like:

https://cat.eduroam.org/user/API.php?action=downloadInstaller&profile=XXXX&device=DDDC&lang=en

You need to replace XXXX with your profile id, and this you see i the
link of the downloads page, and DDDD is the device id which can be:

w10, w8, w7, vista, apple_mojave (and others but you can use this one
for all reasonably new versions), mobileconfig (for iOS), linux,
chromeos, android_pie (same as for apple, you can use it for anything
from 4.4).

This way you should be able to create local links without making the
profile visible.

Still you should remember that your users are likely tofind CAT by
themselves and should not be confused by that they see there. If you do
not want them to download directly form CAT then you could create
profile redirects (while still keeping direct links to CAT)

Will this help?

Tomasz


W dniu 25.01.2019 o 12:02, Robert Franklin pisze:
> Hello,
>
> We’d like to offer two versions of the CAT: one using a local root CA and 
> the other using a well-known public root CA.  The rationale here is that, 
> for platforms where you can limit the trusted scope of the CA [e.g. iOS], 
> or you can’t [usually] use a public CA [Android], then the local root CA is 
> better; for platforms where you can’t [Windows] then the public root CA is 
> better (at least to avoid adding a new CA that people might object to).
>
> We can do this with the CAT, and limit what platforms are available with 
> each option, but users get presented with a [potentially confusing] choice 
> of profiles and the only control we have over that message is the [short] 
> title we use for the profile.
>
>
> In our case, we provide direct links to the CAT installer on our website 
> for Windows, so just linking directly to it is fine: it doesn’t need to 
> appear on the CAT menu (especially in the Android app).  However, for the 
> download link to work, we need to mark that profile as ‘production ready’, 
> which then gives users thechoice.
>
>
> It would be useful, in our case, if there was another option, where we 
> could mark the profile as ‘hidden’ whilst ‘production ready’, to stop it 
> appearing as a direct choice to users but still allow the direct download 
> link to work for the enabled platforms, or some other combination of 
> options to achieve something similar.
>
> Alternatively, is there another way to achieve this?
>
>
> Thanks in advance for any help,
>
>   - Bob
>
>
-- 
Tomasz Wolniewicz    
          address@concealed        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750                            tel kom.: +48-693-032-576

Attachment: smime.p7s
Description: Kryptograficzna sygnatura S/MIME