cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

[[cat-users]] CAT profiles not installing CA cert on Windows 10

From: Vlad Mencl <vladimir.mencl AT reannz.co.nz>
To: cat-users AT lists.geant.org
Cc: Dylan Reeves <Dylan.Reeves AT sit.ac.nz>, Paul Gunn <paul.gunn AT reannz.co.nz>
Subject: [[cat-users]] CAT profiles not installing CA cert on Windows 10
Date: Thu, 27 Feb 2020 10:09:57 +1300

Hi,

We (REANNZ) are assisting our members here in New Zealand with using CAT ... and one of our members (sit.ac.nz) has tried rolling out their CAT profile onto Windows 10 devices, but the devices were failing to validate the certificate.

After some troubleshooting (involving Microsoft support), the solution was to import the Issuing CA certificate into the NTAuth store with:

"certutil -enterprise -addstore NTAuth C:\IssuingCA.cer"

I don't know if this is specific to this single site, or whether it's a new quirk of Windows 10 that would be affecting everyone.

Would anyone know if they've had to deal with something similar?

Many thanks in advice for any pointers.

Cheers,
Vlad

PS: The CA in question here is:
CN=Sectigo RSA Domain Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
- and the CAT ID of this IdP is 6292 - https://cat.eduroam.org/?idp=6292&profile=7007

--
Vladimir Mencl
Senior Software Engineer

Research & Education
Advanced Network NZ Ltd

www.reannz.co.nz

[[cat-users]] CAT profiles not installing CA cert on Windows 10, Vlad Mencl, 02/26/2020
- <Possible follow-up(s)>
- [[cat-users]] CAT profiles not installing CA cert on Windows 10, Vlad Mencl, 02/26/2020
  - RE: [[cat-users]] CAT profiles not installing CA cert on Windows 10, Dylan Reeves, 02/27/2020