The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello,

> I’ve got an issue generating the cat profile because the EAP
> certificate. Recently we changed our radius server certificate (we use
> Cisco ISE) from a self-signed to one signed by a public CA.
> 
> It gives me an error because it’s telling me that this is a server
> certificate.
> 
> How can I fix the problem?

You need to upload the *root CA* certificate of that public CA to CAT,
and can optionally upload any needed *intermediate CA* certificates.

There is no need and no use in uploading the server certificate.

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature