The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Paul Dekkers <paul.dekkers AT surf.nl>]

Hi,

 

FWIW; we want to look into supporting this from the geteduroam iOS app. So far, I installed geteduroam .mobileconfigs directly from the website with the EAP-TLS certificate embedded, and that just seemed to work. On download, iOS asks me if I want to deploy this to my phone, or some other device/Watch. A similar suggestion in the geteduroam App would be nice – but is on the list “to investigate”,

 

Paul

 

 

From: cat-users-request AT lists.geant.org <cat-users-request AT lists.geant.org> on behalf of Andreas Zeller <cat-users AT lists.geant.org>
Date: Thursday, 1 February 2024 at 17:53
To: cat-users AT lists.geant.org <cat-users AT lists.geant.org>
Subject: [[cat-users]] How to get the eduroam certificate on an Apple Watch

Dear eduroam team,

 

For years, I have tried to connect my Apple Watch to eduroam. Neither connecting to eduroam directly nor installing the eduroam.org certificate for Apple devices worked.

 

This is what worked for me on iOS 17.3 and watchOS 10.3:

·         On a Mac, get an installation profile from cat.eduroam.org

·         On the Mac, open the profile with Apple Configurator. Duplicate it or create a new profile, copying as many settings as possible

·         (Important) Enter your user Wi-Fi name and password and make them part of the profile. I think this may be the crucial part that otherwise keeps the profile from being installed.

·         Save the profile and Airdrop it to your iPhone. You can now install it on your Apple Watch.

·         Connect your Apple Watch to eduroam. You may have to accept some extra certificates, but after that, you should be connected.

·         If everything works, you're done! Keep the profile in a safe place (or delete it), as it contains your password in the clear.

 

The process is made somewhat more difficult as the eduroam.org certificate is signed and therefore immutable; also, adding your name and password to the certificate brings obvious security risks. But in case someone asks for assistance, the above may help.

 

Best wishes, and keep up the good work,

 

Andreas Zeller

 

 

This message will be sent to a public mailing list. Only English language please!

 

---

Prof. Dr. Andreas Zeller  |  Faculty

CISPA Helmholtz Center for Information Security

Stuhlsatzenhaus 5, 66123 Saarbrücken, Germany

 

Phone: +49 681 87083-2372  |  Fax: +49 681 87083-8801

Mail: zeller AT cispa.de  |  Web: https://andreas-zeller.info  |  Mastodon: @AndreasZeller AT mastodon.social

 

 

 

To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users