The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

> We are employees of Mugla Sitki Kocman University İnformation
> Technologies. We are using Eduroam for wireless network. We see that the
> other Universities are using Geant Cert.  We want to know that how can
> we take Geant Cert?

You are probably referring to certificates issued by the GEANT Trusted
Certificate Service (TCS) programme. You can find more information about
this service here:

https://www.geant.org/Services/Trust_identity_and_security/Pages/TCS.aspx

Basically, TÜBİTAK ULAKBİM as the National Research and Education
Network in Turkey has to subscribe to the service and designate your
institution as an entitled entity to get certificates.

Note however that TCS certificates are backed by a commercial CA
(DigiCert) and there is no particular benefit in using them over any
other CA (except that the price is different).

Note also that the current term of TCS with DigiCert is coming to an end
.. soonish ... maybe 2021? ... and that a next generation could in
prinicple run with a different provider and different root CA - meaning
you would need to perform a root cert rollover for your client
configurations; something best referred to as "not fun at all".

Specifically, the recommendation for eduroam purposes is to use your own
private CA root if you have the technological expertise to do so. There
is a long treatise on the pros and cons of commercial CAs on this page:

https://wiki.geant.org/display/H2eduroam/EAP+Server+Certificate+considerations

Greetings,

Stefan Winter

> 
>  
> 
>  
> 
>  
> 
> * *
> 
> Best Regards**
> 
> * *
> 
> *Ercan DELİCE*
> 
> *Ofis*: 0252 211 21 73
> 
> e-mail: _ercan AT mu.edu.tr <mailto:ercan AT mu.edu.tr>_
> 
> */Muğla Sıtkı Koçman Üniversitesi
> 
> /*
> 
> To unsubscribe, send this message:
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> Or use the following link:
> https://lists.geant.org/sympa/sigrequest/cat-users


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature