cat-users AT lists.geant.org
Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)
List archive
- From: "Dean, Barry" <bvd AT liverpool.ac.uk>
- To: "'cat-users AT lists.geant.org'" <cat-users AT lists.geant.org>
- Subject: [[cat-users]] Windows hates me
- Date: Tue, 14 Jun 2022 10:31:22 +0000
- Accept-language: en-GB, en-US
- Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=liverpool.ac.uk; dmarc=pass action=none header.from=liverpool.ac.uk; dkim=pass header.d=liverpool.ac.uk; arc=none
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=AoxQg3auSE7de7y79NAi9lJdMHnpT1KfCp50EIIRHjM=; b=InnXwgdx7xD7KtzoaaIpjIsqKdvlk5O8UL455AgZvKy0rauJeCNKL4UwxGT7MiJdkHN2QW799fs/th2jqUdOjdbkpRJ1Me2tbL/uf4WLCLRbSpDtlz8LPokU/4yPcskOHfIhQx9rcXN/y+XDlqENbvpH3yzQ3mxEWeEZVkd5b7glYsJziPGF9pMkoK5h5FPyfZlcL7Ia3o5Wm1uYbDjzh+c/SE4FvUJe6u/xXmyxlfCMDzeMjR3+I9qs5p2bN2XTbzENvYuP9wwcPgUiZ/4KWtXQbww4+ilbfS82H7KgNoH+mhvnxZAJm1pLfimhi2a14JCeV7mwpirI0JvfiE3E5w==
- Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=NplC4jKg1tzpnuTxqQgeCdwCGNVD2mveKEEpaSejPViBM+uJV8qFDx1yM+rPBPUCoA0SasukM63hKt3LRHZox9MToB3o2nbZOi0r9eHwKj0opXrFO3O9bYp41FBRmEZfqd3zbNyB6CVh+8DVPAeQhj/XmDV8Ecvc7kzn8wUqXnLxUzuyKijpSL12L7d7G/HULzJF6jhdWgybzF6y/INX02egNso51LISZpabCxRctd6jIBmXl12VP0arFDEaZ4//ncc2zCE47QzGdjePrf5ryvS6tKpSWk3XerCBGYKxbarxtqFAHLHeyrdYvprTX4vAqpkxJTPepbdvMBHlNbiJmg==
- Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=liverpool.ac.uk;
|
So today was the big switchover day to a new radius cert signed by a new root CA.
All OSes tested work with the CAT tool. Except Windows.
The profile has the Intermediate and Root Cas in it and the name of the radius server it is authenticating.
In the Windows XML profile the thumbprint in the “TrustedCA” tag, is set to one I can’t find anywhere!
When we change it to the fingerprint of the new radius server cert, it all works.
Why does that profile work everywhere on all OSes, and is different on Windows 10!
Thanks
Barry Dean BSc (Hons) (He/Him) Network Services Team Leader Network Services Team IT Services
University of Liverpool I IT Services I Brownlow Hill I Liverpool I L69 3GG
|
- [[cat-users]] Windows hates me, Dean, Barry, 06/14/2022
- Re: [[cat-users]] Windows hates me, Tomasz Wolniewicz, 07/13/2022
- RE: [[cat-users]] Windows hates me, Dean, Barry, 07/13/2022
- Re: [[cat-users]] Windows hates me, Tomasz Wolniewicz, 07/13/2022
Archive powered by MHonArc 2.6.19.