The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Paul Dekkers <paul.dekkers AT surf.nl>]

Hi,

On 16/03/2021 15:17, Eleanor Coultish wrote:
> When using either the geteduroam app or Ruckus Cloudpath to configure 
> a Samsung Galaxy Note 20 the device is unable to connect to eduroam 
> when the certificate is set to be validated. The particular Android 
> build on this phone (11 with Feb security patch) still has the option 
> for 'do not validate certificate' and it will connect to eduroam when 
> it's set to this but obviously we'd prefer it to be validated. We've 
> had a handful of these over the last few weeks, all Samsungs and 
> mostly different flavours of the Note. I know it's not particular to 
> the cat tool but I just wondered if anyone else has come across this 
> issue and if there is a workaround?

I see you have your anonymous outer identity to "@york.ac.uk" in CAT; 
can you try to either remove the outer identity enforcement alltogether? 
(Or making that "anonymous AT york.ac.uk", but removing the requirement is 
more certain.)

> One thing with the app though is that we have a restricted ssid that 
> allows access to the Playstore to enable users to download the 
> geteduroam app. When running the app though we get an error message to 
> say we need a network connection to load the list of institutions. Is 
> there something else we need to whitelist so that the app will work 
> properly?

We host our discovery data on a CDN; for the App to work, you'd 
basically need to whitelist both cat.eduroam.org addresses as well as 
discovery.eduroam.app - and that being rather dynamic, I'm not sure this 
works well.

Paul