The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Paetow <Stefan.Paetow AT jisc.ac.uk>]

Ahh, brilliant, thank you Alex.

I'll suggest this. Of course the server also has to be set up, so I'll have a word with the admin in question. 

With Kind Regards

Stefan Paetow
Federated Roaming Technical Specialist

t: +44 (0)1235 822 125
gpg: 0x3FCE5142
xmpp: stefanp AT jabber.dev.ja.net
skype: stefan.paetow.janet

jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.

On 10 Sep 2019, at 13:51, Alex Sharaz <alex.sharaz AT york.ac.uk> wrote:

I think you can. If you log in as an admin for your institution there is a section in your profile where you specify your radius cert and CA chain (EAP Details for this profile). You can add more options so I guess you can specify another cert CN and CA chain

Haven't tried the above of course :-)

Would be good if it worked. We use CloudPath XpressConnect ES for device configuration and although the good news is that on the appliance you can specify multiple certs and CA chains unfortunately, this only works when using a .mobileconfig file, when using their app to configure a client it currently does not support multiple trusted certs /CA chains

There's an enhancement request in for that :-)

Rgds

Alex

On Tue, 10 Sep 2019 at 13:38, Stefan Paetow <Stefan.Paetow AT jisc.ac.uk> wrote:

Hi,

Apologies if the question has been asked before (I've searched the archives and only found one instance from April this year that doesn't really answer the question): One of our institutions has to update its RADIUS certificates (including CA root), and as such, they now need to update their CAT tool to include both sets of certificates to allow for a smooth transition.

Does CAT support this? If yes, that's good and I'll have to look at the interface (I don't have any organisations in CAT to look), if no, what is the advice for this scenario?

I'd usually ask my colleague who's been around eduroam a lot longer (you know him ;)), but he's on leave, so I'm frantically paddling in deep water with this one ;-)

Thanks very much in advance.

With Kind Regards

Stefan Paetow
Federated Roaming Technical Specialist

t: +44 (0)1235 822 125
gpg: 0x3FCE5142
xmpp: stefanp AT jabber.dev.ja.net
skype: stefan.paetow.janet

jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.



To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users