The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Hi,

  the way I see it you have TTLS/MACHAPv2 set as the EAP priority, and 
this is what the attached profile sets. However as you point out the 
problem may be the empty Phase2Authentication section.

With Windows TTLS we were not able to find a way to install user 
credentials therefore we just made this part unset leaving it to Windows 
to ask for credentials at the first login. Now it looks as if Windows11 
makes a peoblem out of that.

If you change the priority of EAP methods in CAT and make PEAP first 
then you will get the PEAP profile and everything should work well (I hope).

Tomasz



W dniu 31.08.2022 o 16:48, Martin Bickel (via cat-users Mailing List) pisze:
> Hi Tomasz,
>
> today I have a test machine and can make tests myself.
>
> You find attached our profiles after a installation on Win11 and 
> Win10. There are no differences in both files.
>
> I think I found the problem by checking the xml file. The section 
> <Phase2Authentication/> is not filled with our parameters. When I 
> manually set up eduroam and make then an export this section is filled 
> with this parameters on Win11:
>   <Phase2Authentication>
>     <MSCHAPv2Authentication>
> <UseWinlogonCredentials>false</UseWinlogonCredentials>
>     </MSCHAPv2Authentication>
>   </Phase2Authentication>
>
> So in our setting we use PEAP with MSCHAPv2 for the normal profiles, 
> but this parameter is missing in the xml file.
>
> I think Win11 here makes a check and gives an error and Win10 does not 
> make a check.
>
> Kind regards
> Martin
>
> Am 30.08.2022 um 22:28 schrieb Tomasz Wolniewicz:
> > Hi,
> >
> >    I am on vacation with no possibility to actually retry the problem 
> > myself.
> >
> > For the second profile "eduroam® via partner" it is quite OK to give 
> > this error message. This is a Hotspot 2.0 profile installed "juts in 
> > case" someone found a network with an SSID different from eduroam but 
> > still claiming to be eduroam with a Hostspot 2.0 RCOI. Not all 
> > network cards support HS 2.0 and for such cases the installation is 
> > supposed to fail silently.
> >
> > However it should not happen that the proper eduroam profile. Could 
> > you send ne such a profile, I would that a look what the problem 
> > could be and perhaps find the reason.
> >
> > The other issue - the "not updated" message should not appear any 
> > more with the newly downloaded installers.
> >
> > Tomasz
> >
> >
> > W dniu 30.08.2022 o 14:55, Martin Bickel (via cat-users Mailing List) 
> > pisze:
> > > Hello everybody,
> > >
> > > I can confirm a problem for our university with Windows 11 too. 
> > > Since friday I have 4 people with such a problem in out ticket system.
> > >
> > > In the normal debug log from one user I found:
> > > Execute: C:\Windows\sysnative\netsh wlan add profile 
> > > C:\Users\charl\AppData\Local\Temp\wlan_prof-0.xml
> > > netsh returned 1
> > > Profile installation error for "eduroam®"
> > > Execute: C:\Windows\sysnative\netsh wlan add profile 
> > > C:\Users\charl\AppData\Local\Temp\wlan_prof-1.xml
> > > netsh returned 1
> > > Profile installation error for "eduroam® via partner"
> > >
> > > For more details I have to ask the user for a meeting.
> > >
> > > The problem with the message "Windows 10 is not up to date" at the 
> > > Windows 11 machine is gone away. I think the update from friday has 
> > > fixed it.
> > > @Jens Schleede: have you tried to download a new installer since 
> > > friday? There was a thread called "Windows11 Problems​" on this list 
> > > for this message.
> > >
> > > Kind regards
> > >
> > > Martin
> > >
> > > Am 30.08.22 um 11:13 schrieb Jens Schleede (via cat-users Mailing 
> > > List):
> > > > Hello list,
> > > >
> > > > Our CAT eduroam installer does not work on Windows 11.
> > > >
> > > > I have debugged the problem a bit and found the following error 
> > > > when the wlan profile is installed:
> > > >
> > > >   PS C:\Users\User\Downloads\eduroam> netsh wlan add profile 
> > > > .\wlan_prof-0.xml
> > > >   Profile format error 0xE225:
> > > >   The network connection profile is corrupted.
> > > >
> > > >
> > > >
> > > > Also the installer tells the users that their Windows is not up to 
> > > > date and they should upgrade their Windows10.
> > > >
> > > >
> > > > Best regards
> > > > Jens Schleede
> > > >
> > > > --
> > > >
> > > > Jens Schleede
> > > > Universitätsrechenzentrum (URZ)
> > > > Universität Greifswald
> > > > Felix-Hausdorff-Str. 18
> > > > 17489 Greifswald
> > > > Germany
> > > >
> > > > Tel. +49 3834 420 1423
> > > > Fax. +49 3834 420 1401
--
Tomasz Wolniewicz
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uniwersyteckie Centrum Informatyczne   Information&Communication Technology 
Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun            pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750               tel kom.: +48-693-032-576