The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Paetow <address@concealed>]

Hi Jason,

 

You should only upload the root CA certificate to CAT. Since your server will present the server certificate, the devices are going to use the information in the profile (the root CA certificate and the server certificate's common name) to validate the server certificate before continuing authentication.

 

With kind regards

 

Stefan Paetow

Federated Roaming Technical Specialist

eduroam(UK), Jisc

 

email/teams: address@concealed

gpg: 0x3FCE5142

 

For eduroam support, please contact the eduroam team via address@concealed and mark it for eduroam’s attention.

I am not available on Mondays and Fridays between 12:00 and 15:00 London time (UTC in winter, UTC+0100 in summer).

 

Note: I don’t expect a reply outside of your working hours, since I work internationally with colleagues in different nationalities with different religions, customs, and holidays. Reply when it is convenient for you.

 

Jisc is a registered charity (in England and Wales under charity number 1149740; in Scotland under charity number SC053607) and a company limited by guarantee registered in England under company number 05747339, VAT number GB 197 0632 86. Jisc's registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.

 

Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.

 

For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice

 

 

From: <address@concealed> on behalf of Jason Duerstock <address@concealed>
Reply to: Jason Duerstock <address@concealed>
Date: Saturday, 30 August 2025 at 14:15
To: "address@concealed" <address@concealed>
Subject: [[cat-users]] CAT admin issue

 

Hello!

 

I'm trying to update our certificate chain in CAT, but it keeps rejecting the certificate for our actual RADIUS server.  How can I go about figuring out why this isn't working?  The error message is not helpful at all.

 

Thanks,

 

Jason Duerstock

Network Architect

Gallaudet University

(202) 651-5514

To unsubscribe, send this message: mailto:address@concealed?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users