The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello,

the installers appear to working nominally.

But they can only configure what the institution admin has set up. In your case, I see a certificate signing chain from Sectigo, under the GEANT TCS Contract Gen 4.

That contract ended in January, and the last certificates from that contract will expire Dec 2025.

My guess is thus that the RADIUS server from egi.eu likely has a now-expired certificate (and the device in UK quite likely is configured to ignore certificate validation failures, i.e. has not been configured with CAT).

There is nothing we can do about this from the CAT operator side - your local RADIUS administrator will need to get a new certificate, and update the EGI CAT settings with the new root CA (+optionally any new intermediate CAs).

Greetings,

Stefan Winter

 

On 11/14/25 16:07, Marcos Llopis (via cat-users Mailing List) wrote:

Dear SURF and GEANT eduroam support,

I am contacting you on behalf of the EGI Foundation regarding an issue with eduroam authentication affecting our users.

We are experiencing consistent authentication failures when attempting to connect to eduroam using the EGI Foundation CAT profile:

• CAT profile: https://cat.eduroam.org/?idp=1733

• Locations affected: the Netherlands (e.g. Science Park, Amsterdam) and Hungary (SZTAKI).
  One user in the UK was able to connect successfully on an Android device.

• Affected devices: Android, Windows, and Apple

• Error: authentication failure on all devices

The CAT installer completes correctly, and the credentials used are valid, but devices are unable to authenticate.

At this moment, the only successful connection we are aware of is from the UK on a single Android device.
In both the Netherlands and Hungary, no device (Android, Apple, or Windows) has been able to connect.

Could you please check whether there are any issues with the eduroam configuration for the EGI Foundation profile?

Thank you in advance for your assistance.

Kind regards,

Marcos Llopis

--

Marcos Llopis | Sys Admin and IT Support Officer | EGI Foundation (Amsterdam, The Netherlands)

W: www.egi.eu | Mail: address@concealed

EGI: Advanced Computing for Research
EGI.eu is certified ISO 9001:2015, ISO/IEC 20000-1:2018, and ISO/IEC 27001:2017