The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello,

> ist es möglich, eduroam auf einem Smartphone mit Android einzurichten
> und zu betreiben, wenn auf dem Gerät keine Bildschirmsperre (mit PIN
> oder Muster) eingerichtet ist?

Android requests the device lock because a so-called digital certificate
has to be installed. That certificate is used to verify the authenticity
of the eduroam network whenever you connect to a network with the
eduroam name.

The activation of a device lock is REQUIRED by the Android operating
system as soon as a digital certificate is installed. I.e. this is
beyond our app's control.

The only alternative would be to configure your device manually and
instruct it to IGNORE the authenticity check (because then you would not
need the certificate on the device).

However, then your device would send your username and password to
random third parties who claim to be an eduroam network but may instead
be an attacker trying to steal your password.

So, while technically possible, it is a VERY BAD idea and we do not
encourage or endorse any such behaviour.

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature