The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello,

> we created a cat profile containing only EAP-TLS as an authentication
> method.
> 
> The “installer” (a .mobileconfig Apple profile) seems to be unavailable
> to download for iOS devices.
> 
> That’ strange because the same profile, available to download from cat,
> for Apple OSX, if installed on iOS is 100% compatible with iOS and
> useful to autoconfigure iOS iPads or iPhone.
> 
> Can you make it available also for iOS users or I am missing something?

This was done intentionally at the time.

iOS can download a TLS profile and install it just fine.

However, the profiles naturally do not contain an actual client certificate.

Earlier versions of iOS we tested were unable to associate a
already-installed TLS client certificate (i.e. imported as a stand-alone
.p12 file) with the newly installed Wi-Fi profile. This rendered the
entire installation process pointless.

What you write above seems to imply that things have changed? Did you
actually *use* the Wi-Fi profile with a pre-installed client certificate
and did that work? How does the initial connection dialog look like, if
any? Are you asked about the client certificate, or will it just pick
the (one and only) client cert it finds in the device?

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature