Skip to Content.
Sympa Menu

cat-users - Sv: [[cat-users]] Anonymous Outer ID with EAP-TLS (specifically: Windows)

cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Sv: [[cat-users]] Anonymous Outer ID with EAP-TLS (specifically: Windows)


Chronological Thread  
    < Chronological >       < Thread >
  • From: Anders Nilsson <address@concealed>
  • To: Jan-Frederik Rieckers <address@concealed>, "address@concealed" <address@concealed>
  • Subject: Sv: [[cat-users]] Anonymous Outer ID with EAP-TLS (specifically: Windows)
  • Date: Fri, 2 Oct 2026 07:34:35 +0000
  • Accept-language: sv-SE, en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=umu.se; dmarc=pass action=none header.from=umu.se; dkim=pass header.d=umu.se; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=7dewhuoh2tker9hAiis0T6mRw2pXTGA92R25pL4VZ4M=; b=cKhcuhmYGzpR2qt9euJdyvw2ShVBu/MSumOq9by16fcU0VIz3lH8FUfMhPfAVF2WBqRKU78w4yEVW1yU+thBkJ54D/D1WS80dVRvY9NztbnjYAuwOG3Htn+8Aag4fAGLcCpVJQMedTkH+F5DqS7lDGNklzBw/Yzz4S/aD9dxkN5/b2H9OxaelsL/JlJdatsFmYmt9jMzLE+GL8nl/0Zdi74BlkFbCaY/ViqKSkdnc2hJMj3YmTpToKEpxwBy/eYA8FsHr6OrhT3RxY5FhWDTprKLjruxiH/1IIuEeexzo5cX5Zh86m9KVeYSElN4DELSgyxtYocGQ7vGxobeZukKzg==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=rUztRkHrYxFgxzT+2YZ+AoB9tYa3o3vBs9StG9lyufBSJoRVSlkK33bbzwb77bJto1uSIQ07kxgvr3QoggsMc5lGlznEwaZClB3ecbshw0yWLXMA9kxrW/V1CcihvFSuu0+FfKxSNLJoNh9ab0IL7ufuLXAVkX5CrtKI2YlGXAypXenkwPQkG01JPXKCSIwK8meiygq6aJLlsl8nTGeq7wI/oXBl7UBxnnhLXcQvo107yRHCvPNhVa2AdDaoJPn4Gz2QroQXNhcl5rZpzay3aQoAXnZwTIcDx099Z1vpU4N+OYnQDf+siAkaqN9KV9yGzHuPn1OD6A05prGifVoxNA==
  • Authentication-results: mail.geant.org; dkim=pass (1024-bit key; unprotected) header.d=umu.se address@concealed header.a=rsa-sha256 header.s=selector1 header.b=oRtDn5z6; dkim-atps=neutral
  • Authentication-results: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=umu.se;
Hi Jan, and the rest of you eduroamers,

Sounds like EAP-TLS 1.3 to me.

Cheers
Herr Nilsson
Umeå univ/SUNET


2026-10-02 08:57 skrev "[NAMN]" <address@concealed> följande:

Hi all,

one of our institutions wants to use a specific "outer" ID for EAP-TLS.
(Technical background: The server root certificate expires and they want
to migrate to a new root using a switch by outer ID)

They use their own certificates, but want to use CAT for configuring the
devices. On Windows they noticed that the installer does not honor the
outer ID configuration, apparently the Windows installer doesn't even
include this.

From what I heard from the admin, windows needs a specific
"DifferentUsername" property to not use the CN/UPN/... from the certificate.

Does the windows installer support it already and we're just holding it
wrong?
If not: Is this something that the windows installer could be doing?

Cheers,
Janfred

--
Herr Jan-Frederik Rieckers
Security, Trust & Identity Services

E-Mail: address@concealed | Fon: +49 30884299-339 | Fax: +49 30884299-370
Pronomen: er/sein | Pronouns: he/him
__________________________________________________________________________________

DFN - Deutsches Forschungsnetz | German National Research and Education
Network
Verein zur Förderung eines Deutschen Forschungsnetzes e.V.
Alexanderplatz 1 | 10178 Berlin
https://www.dfn.de

Vorstand: Prof. Dr.-Ing. Stefan Wesner | Prof. Dr. Helmut Reiser |
Christian Zens
Geschäftsführung: Dr. Christian Grimm | Alina Hain
VR AG Charlottenburg 7729B | USt.-ID. DE 136623822



Archive powered by MHonArc 2.6.19+.

Top of Page