The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Jan-Frederik Rieckers <address@concealed>]

Hi all,

one of our institutions wants to use a specific "outer" ID for EAP-TLS.
(Technical background: The server root certificate expires and they want 
to migrate to a new root using a switch by outer ID)

They use their own certificates, but want to use CAT for configuring the 
devices. On Windows they noticed that the installer does not honor the 
outer ID configuration, apparently the Windows installer doesn't even 
include this.

From what I heard from the admin, windows needs a specific 
"DifferentUsername" property to not use the CN/UPN/... from the certificate.

Does the windows installer support it already and we're just holding it 
wrong?
If not: Is this something that the windows installer could be doing?

Cheers,
Janfred

--
Herr Jan-Frederik Rieckers
Security, Trust & Identity Services

E-Mail: address@concealed | Fon: +49 30884299-339 | Fax: +49 30884299-370
Pronomen: er/sein | Pronouns: he/him
__________________________________________________________________________________

DFN - Deutsches Forschungsnetz | German National Research and Education 
Network
Verein zur Förderung eines Deutschen Forschungsnetzes e.V.
Alexanderplatz 1 | 10178 Berlin
https://www.dfn.de

Vorstand: Prof. Dr.-Ing. Stefan Wesner | Prof. Dr. Helmut Reiser | 
Christian Zens
Geschäftsführung: Dr. Christian Grimm | Alina Hain
VR AG Charlottenburg 7729B | USt.-ID. DE 136623822

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature