The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Would this TV accept TLS credentials? If so then hostedIdP could be an 
answer. Also you could ask some friendly soul with access to a web 
signing certificate to sigh the profile for you. Apple does not require 
software signing certificates, so any will do. The signature is just a 
simple S/MIME.

The lime below is copied form the signer-template in CAT:

openssl smime -sign -signer "$MY_PATH/$PUBKEY" -inkey 
"$MY_PATH/$PRIVKEY"  $passin -certfile "$MY_PATH/$CA_CHAIN" -nodetach 
-outform der -in $1 -out $2

Cheers

Tomasz



W dniu 16.08.2023 o 12:10, Stefan Paetow (via cat-users Mailing List) pisze:
> Just an update on this:
>
> Dick and I collaborated on this, and it's since been clarified that older 
> Apple TVs will need a mobileconfig file that contains the user credentials. 
> This of course means that it is then turned into an unsigned profile. 
> Investigation is still on-going :-)
>
> Stefan Paetow
> Federated Roaming Technical Specialist
> eduroam(UK), Jisc
>
> email/teams: stefan.paetow AT jisc.ac.uk
> gpg: 0x3FCE5142
>
> For eduroam support, please contact the eduroam team via help AT jisc.ac.uk and 
> mark it for eduroam’s attention.
> On Wednesdays and Fridays, I am not available between 12:00 and 15:00.
>
> jisc.ac.uk
>
> Jisc is a registered charity (number 1149740) and a company limited by 
> guarantee which is registered in England under Company No. 5747339, VAT No. 
> GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 
> 6NB Tel: 020 3697 5800.
>
>
>
>
>
> On 14/08/2023, 21:44, "cat-users-request AT lists.geant.org <mailto:cat-users-request AT lists.geant.org> 
> on behalf of Stefan Paetow" <cat-users-request AT lists.geant.org 
> <mailto:cat-users-request AT lists.geant.org> on behalf of cat-users AT lists.geant.org 
> <mailto:cat-users AT lists.geant.org>> wrote:
>
>
> Hi Dick,
>
>
> It looks like an option to use EAP-FAST is not expected to be in there, more 
> specifically, this option: EAPFastProvisionPACAnonymously.
>
>
> If that gets removed, then it's quite possible it'll load ok.
>
>
> :-)
>
>
> Stefan Paetow
> Federated Roaming Technical Specialist
> eduroam(UK), Jisc
>
>
> email/teams: stefan.paetow AT jisc.ac.uk <mailto:stefan.paetow AT jisc.ac.uk>
> gpg: 0x3FCE5142
>
>
> For eduroam support, please contact the eduroam team via help AT jisc.ac.uk 
> <mailto:help AT jisc.ac.uk> and mark it for eduroam’s attention.
> On Wednesdays and Fridays, I am not available between 12:00 and 15:00.
>
>
> jisc.ac.uk
>
>
> Jisc is a registered charity (number 1149740) and a company limited by 
> guarantee which is registered in England under Company No. 5747339, VAT No. 
> GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 
> 6NB Tel: 020 3697 5800.
>
>
>
>
>
>
>
>
>
>
> On 14/08/2023, 21:24, "cat-users-request AT lists.geant.org <mailto:cat-users-request AT lists.geant.org> 
> <mailto:cat-users-request AT lists.geant.org <mailto:cat-users-request AT lists.geant.org>> on behalf of Dick Visser" 
> <cat-users-request AT lists.geant.org <mailto:cat-users-request AT lists.geant.org> <mailto:cat-users-request AT lists.geant.org 
> <mailto:cat-users-request AT lists.geant.org>> on behalf of cat-users AT lists.geant.org <mailto:cat-users AT lists.geant.org> 
> <mailto:cat-users AT lists.geant.org <mailto:cat-users AT lists.geant.org>>> wrote:
>
>
>
>
> Hii
>
>
>
>
> I have an Apple TV 3rd gen, A1469, that I would like to connect to
> eduroam. By connecting it to the Configurator app on macOS, through an
> USB data cable, I have the possibility to add a profile. I download
> that from cat.eduroam.org, and add it. Things seem to go ahead
> but they fail after a few seconds. The Configurator app can retrieve
> logs, and they say this:
>
>
>
>
> Aug 14 11:13:00 Apple-TV mc_mobile_tunnel[97] <Notice>: (Note ) MC:
> mc_mobile_tunnel starting.
> Aug 14 11:13:02 Apple-TV mobile_installation_proxy[96] <Error>:
> 0x405000 handle_connection: Could not receive request from host.
> Aug 14 11:13:04 Apple-TV mc_mobile_tunnel[97] <Notice>: (Note ) MC:
> Escalation accepted.
> Aug 14 11:13:04 Apple-TV mc_mobile_tunnel[97] <Notice>: (Note ) MDM:
> Attempting to perform Supervised request: ProceedWithKeybagMigration
> Aug 14 11:13:04 Apple-TV mc_mobile_tunnel[97] <Notice>: (Note ) MDM:
> Attempting to perform Supervised request: ProfileList
> Aug 14 11:13:04 Apple-TV mc_mobile_tunnel[97] <Notice>: (Note ) MDM:
> Handling request type: ProfileList
> Aug 14 11:13:04 Apple-TV mc_mobile_tunnel[97] <Notice>: (Note ) MDM:
> Attempting to perform Supervised request: InstallProfileSilent
> Aug 14 11:13:04 Apple-TV mc_mobile_tunnel[97] <Notice>: (Warn ) MC:
> Payload “eduroam® - SSID eduroam” contains unexpected fields in EAP
> Configuration. They are: <CFBasicHash 0x15dc4ba0 [0x368a98d0]>{type =
> mutable dict, count = 1,
> entries =>
> 1 : <CFString 0x15dc06b0 [0x368a98d0]>{contents =
> "EAPFastProvisionPACAnonymously"} = <CFBoolean 0x368a9ad8
> [0x368a98d0]>{value = false}
> }
> Aug 14 11:13:04 Apple-TV profiled[83] <Notice>: (Note ) MC: Checking
> for MDM installation...
> Aug 14 11:13:04 Apple-TV profiled[83] <Notice>: (Note ) MC:
> ...finished checking for MDM installation.
> Aug 14 11:13:04 Apple-TV profiled[83] <Notice>: (Warn ) MC: Payload
> “eduroam® - SSID eduroam” contains unexpected fields in EAP
> Configuration. They are: <CFBasicHash 0x16db0950 [0x368a98d0]>{type =
> mutable dict, count = 1,
> entries =>
> 1 : <CFString 0x16dac580 [0x368a98d0]>{contents =
> "EAPFastProvisionPACAnonymously"} = <CFBoolean 0x368a9ad8
> [0x368a98d0]>{value = false}
> }
> Aug 14 11:13:04 Apple-TV profiled[83] <Notice>: (Note ) MC: Beginning
> profile installation...
> Aug 14 11:13:04 Apple-TV profiled[83] <Notice>: (Error) MC: Rolling
> back installation of profile
> “org.1x-config.eduroam.nl.geant_staff.all_ AT geant.org 
> <mailto:org.1x-config.eduroam.nl.geant_staff.all_ AT geant.org> 
> <mailto:org.1x-config.eduroam.nl.geant_staff.all_ AT geant.org 
> <mailto:org.1x-config.eduroam.nl.geant_staff.all_ AT geant.org>>_staff.en_GB”...
> Aug 14 11:13:04 Apple-TV profiled[83] <Notice>: (Error) MC:
> Installation of profile
> “org.1x-config.eduroam.nl.geant_staff.all_ AT geant.org 
> <mailto:org.1x-config.eduroam.nl.geant_staff.all_ AT geant.org> 
> <mailto:org.1x-config.eduroam.nl.geant_staff.all_ AT geant.org 
> <mailto:org.1x-config.eduroam.nl.geant_staff.all_ AT geant.org>>_staff.en_GB”
> failed with error: NSError:
> Desc : The profile “eduroam®” could not be installed.
> Sugg : The Wi-Fi network “eduroam” could not be installed.
> US Desc: The profile “eduroam®” could not be installed.
> US Sugg: The Wi-Fi network “eduroam” could not be installed.
> Domain : MCProfileErrorDomain
> Code : 1009
> Type : MCFatalError
> Params : (
> "eduroam\U00ae"
> )
> ...Underlying error:
> NSError:
> Desc : The Wi-Fi network “eduroam” could not be installed.
> Sugg : The Wi-Fi network “eduroam” could not be configured for EAP.
> US Desc: The Wi-Fi network “eduroam” could not be installed.
> US Sugg: The Wi-Fi network “eduroam” could not be configured for EAP.
> Domain : MCWiFiErrorDomain
> Code : 13000
> Type : MCFatalError
> Params : (
> eduroam
> )
> ...Underlying error:
> NSError:
> Desc : The Wi-Fi network “eduroam” could not be configured for EAP.
> US Desc: The Wi-Fi network “eduroam” could not be configured for EAP.
> Domain : MCWiFiErrorDomain
> Code : 13004
> Type : MCFatalError
> Params : (
> eduroam
> )
> Aug 14 11:13:04 Apple-TV profiled[83] <Notice>: (Error) MC: Profile
> “org.1x-config.eduroam.nl.geant_staff.all_ AT geant.org 
> <mailto:org.1x-config.eduroam.nl.geant_staff.all_ AT geant.org> 
> <mailto:org.1x-config.eduroam.nl.geant_staff.all_ AT geant.org 
> <mailto:org.1x-config.eduroam.nl.geant_staff.all_ AT geant.org>>_staff.en_GB”
> failed to install with error: NSError:
> Desc : Profile Failed to Install
> Sugg : The profile “eduroam®” could not be installed.
> US Desc: Profile Failed to Install
> US Sugg: The profile “eduroam®” could not be installed.
> Domain : MCInstallationErrorDomain
> Code : 4001
> Type : MCFatalError
> ...Underlying error:
> NSError:
> Desc : The profile “eduroam®” could not be installed.
> Sugg : The Wi-Fi network “eduroam” could not be installed.
> US Desc: The profile “eduroam®” could not be installed.
> US Sugg: The Wi-Fi network “eduroam” could not be installed.
> Domain : MCProfileErrorDomain
> Code : 1009
> Type : MCFatalError
> Params : (
> "eduroam\U00ae"
> )
> ...Underlying error:
> NSError:
> Desc : The Wi-Fi network “eduroam” could not be installed.
> Sugg : The Wi-Fi network “eduroam” could not be configured for EAP.
> US Desc: The Wi-Fi network “eduroam” could not be installed.
> US Sugg: The Wi-Fi network “eduroam” could not be configured for EAP.
> Domain : MCWiFiErrorDomain
> Code : 13000
> Type : MCFatalError
> Params : (
> eduroam
> )
> ...Underlying error:
> NSError:
> Desc : The Wi-Fi network “eduroam” could not be configured for EAP.
> US Desc: The Wi-Fi network “eduroam” could not be configured for EAP.
> Domain : MCWiFiErrorDomain
> Code : 13004
> Type : MCFatalError
> Params : (
> eduroam
> )
> Aug 14 11:13:04 Apple-TV profiled[83] <Notice>: (Note ) MC: Removing
> certificate with persistent ID 636572740000000000000003
> Aug 14 11:13:04 Apple-TV airtunesd[47] <Notice>: 2023-08-14
> 11:13:04.966590 AM [AirPlay] Prefs changed
> Aug 14 11:13:04 Apple-TV profiled[83] <Error>: libMobileGestalt
> MGIOMFBSupport.c:219: IOMobileFramebufferGetMainDisplay failed:
> -536870212
> Aug 14 11:13:05 Apple-TV profiled[83] <Notice>: (Note ) MC: Loaded
> NetworkExtension.framework
> Aug 14 11:13:05 Apple-TV profiled[83] <Notice>: (Error) MC:
> Installation failed. Error: NSError:
> Desc : Profile Installation Failed
> Sugg : Profile Failed to Install
> US Desc: Profile Installation Failed
> US Sugg: Profile Failed to Install
> Domain : MCInstallationErrorDomain
> Code : 4001
> Type : MCFatalError
> ...Underlying error:
> NSError:
> Desc : Profile Failed to Install
> Sugg : The profile “eduroam®” could not be installed.
> US Desc: Profile Failed to Install
> US Sugg: The profile “eduroam®” could not be installed.
> Domain : MCInstallationErrorDomain
> Code : 4001
> Type : MCFatalError
> ...Underlying error:
> NSError:
> Desc : The profile “eduroam®” could not be installed.
> Sugg : The Wi-Fi network “eduroam” could not be installed.
> US Desc: The profile “eduroam®” could not be installed.
> US Sugg: The Wi-Fi network “eduroam” could not be installed.
> Domain : MCProfileErrorDomain
> Code : 1009
> Type : MCFatalError
> Params : (
> "eduroam\U00ae"
> )
> ...Underlying error:
> NSError:
> Desc : The Wi-Fi network “eduroam” could not be installed.
> Sugg : The Wi-Fi network “eduroam” could not be configured for EAP.
> US Desc: The Wi-Fi network “eduroam” could not be installed.
> US Sugg: The Wi-Fi network “eduroam” could not be configured for EAP.
> Domain : MCWiFiErrorDomain
> Code : 13000
> Type : MCFatalError
> Params : (
> eduroam
> )
> ...Underlying error:
> NSError:
> Desc : The Wi-Fi network “eduroam” could not be configured for EAP.
> US Desc: The Wi-Fi network “eduroam” could not be configured for EAP.
> Domain : MCWiFiErrorDomain
> Code : 13004
> Type : MCFatalError
> Params : (
> eduroam
> )
> Aug 14 11:13:05 Apple-TV mc_mobile_tunnel[97] <Notice>: (Error) MC:
> Install profile data error. Error: NSError:
> Desc : Profile Installation Failed
> Sugg : Profile Failed to Install
> US Desc: Profile Installation Failed
> US Sugg: Profile Failed to Install
> Domain : MCInstallationErrorDomain
> Code : 4001
> Type : MCFatalError
> ...Underlying error:
> NSError:
> Desc : Profile Failed to Install
> Sugg : The profile “eduroam®” could not be installed.
> US Desc: Profile Failed to Install
> US Sugg: The profile “eduroam®” could not be installed.
> Domain : MCInstallationErrorDomain
> Code : 4001
> Type : MCFatalError
> ...Underlying error:
> NSError:
> Desc : The profile “eduroam®” could not be installed.
> Sugg : The Wi-Fi network “eduroam” could not be installed.
> US Desc: The profile “eduroam®” could not be installed.
> US Sugg: The Wi-Fi network “eduroam” could not be installed.
> Domain : MCProfileErrorDomain
> Code : 1009
> Type : MCFatalError
> Params : (
> "eduroam\U00ae"
> )
> ...Underlying error:
> NSError:
> Desc : The Wi-Fi network “eduroam” could not be installed.
> Sugg : The Wi-Fi network “eduroam” could not be configured for EAP.
> US Desc: The Wi-Fi network “eduroam” could not be installed.
> US Sugg: The Wi-Fi network “eduroam” could not be configured for EAP.
> Domain : MCWiFiErrorDomain
> Code : 13000
> Type : MCFatalError
> Params : (
> eduroam
> )
> ...Underlying error:
> NSError:
> Desc : The Wi-Fi network “eduroam” could not be configured for EAP.
> US Desc: The Wi-Fi network “eduroam” could not be configured for EAP.
> Domain : MCWiFiErrorDomain
> Code : 13004
> Type : MCFatalError
> Params : (
> eduroam
> )
>
>
>
>
>
>
>
>
> If someone has an idea...
>
>
>
>
> thanks :)
>
>
>
>
> Dick Visser
> To unsubscribe, send this message: mailto:sympa AT lists.geant.org 
> <mailto:sympa AT lists.geant.org> <mailto:sympa AT lists.geant.org 
> <mailto:sympa AT lists.geant.org>>?subject=unsubscribe%20cat-users
> Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users 
> <https://lists.geant.org/sympa/sigrequest/cat-users> 
> <https://lists.geant.org/sympa/sigrequest/cat-users> 
> <https://lists.geant.org/sympa/sigrequest/cat-users;>
>
>
>
>
>
>
> To unsubscribe, send this message: mailto:sympa AT lists.geant.org 
> <mailto:sympa AT lists.geant.org>?subject=unsubscribe%20cat-users
> Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users 
> <https://lists.geant.org/sympa/sigrequest/cat-users>
>
>
>
> To unsubscribe, send this message: 
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users

--
Tomasz Wolniewicz