The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Paul Dekkers <paul.dekkers AT surf.nl>]

Hi,

I recall there is a minimum length of the PIN for some of the requirements, 
like connecting to Exchange. Not sure if that is the case here; but I just 
tested on a Samsung Galaxy S10 with fingerprint and pattern, and did not have 
an issue installing a profile (for NL eVA). Now I must admit that I’m always 
using (and a fan of) public certificates on the servers *) so I’m not sure if 
that’s the difference.

Could you on this particular device maybe try to see how geteduroam works for 
you? The plan is to suggest geteduroam for Android 8+ instead of the existing 
eduroam CAT app, and it may or may not solve the problem.
If you want, I can also send you a temporary eVA NL account to test with, so 
we can identify the problem.

Regards,
Paul

*) because that also reduces the risk of private CAs lying around on your 
clients that have a MitM risk potential (the screaming OS-warnings are there 
for a reason), and it does trust-on-first-use on most clients if people use 
that instead of an installer: which maybe only with EAP-TLS (via geteduroam?) 
you can rule out.


> On 4 Dec 2020, at 09:15, Daniele Albrizio <albrizio AT units.it> wrote:
> 
> Same here for a user with Samsung Galaxy S10 and fingerprint/pin unlock
> 
> On 03/12/20 19:00, Martin Pauly wrote:
>> Hi,
>> 
>> one of our users complains that while he has a PIN screenlock
>> in place, the Android CAT refuses to insert the cert, claiming
>> that screenlock is missing. Also, a few users report the same problem
>> on Google Play. Pretty sure, this is an Android problem, not one
>> with CAT. (IMHO, for public server certs, Android should not request
>> this in the first place.)
>> 
>> But perhaps someone on the list knows a way to work around this.
>> 
>> TIA, Martin
>> 
> -- 
> -------------------------------------------
> Daniele Albrizio
> Servizi di rete | Network Services
> Università degli Studi di Trieste | University of Trieste
> Unita' di Staff Reti di Ateneo
> Via Alfonso Valerio 12 - 34127 Trieste (Italy)
> daniele.albrizio AT units.it
> Tel. | Ph. +39 040 558 3319
> 
>