The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <address@concealed>]

Well in that respect we will still need work, unless we decide that we just leave it to geteduroam to handle ...

Tomasz

W dniu 2.10.2026 o 09:34, Anders Nilsson (via cat-users Mailing List) pisze:

        Hi Jan, and the rest of you eduroamers,
      
        
      
      
        Sounds like EAP-TLS 1.3 to me.
      
        
      
      
        Cheers
      
        Herr Nilsson
      
        Umeå univ/SUNET

2026-10-02 08:57 skrev "[NAMN]" <address@concealed> följande:

Hi all,

one of our institutions wants to use a specific "outer" ID for EAP-TLS.

(Technical background: The server root certificate expires and they want

to migrate to a new root using a switch by outer ID)

They use their own certificates, but want to use CAT for configuring the

devices. On Windows they noticed that the installer does not honor the

outer ID configuration, apparently the Windows installer doesn't even

include this.

From what I heard from the admin, windows needs a specific

"DifferentUsername" property to not use the CN/UPN/... from the certificate.

Does the windows installer support it already and we're just holding it

wrong?

If not: Is this something that the windows installer could be doing?

Cheers,

Janfred

--

Herr Jan-Frederik Rieckers

Security, Trust & Identity Services

E-Mail: address@concealed | Fon: +49 30884299-339 | Fax: +49 30884299-370

Pronomen: er/sein | Pronouns: he/him

__________________________________________________________________________________

DFN - Deutsches Forschungsnetz | German National Research and Education

Network

Verein zur Förderung eines Deutschen Forschungsnetzes e.V.

Alexanderplatz 1 | 10178 Berlin

https://www.dfn.de

Vorstand: Prof. Dr.-Ing. Stefan Wesner | Prof. Dr. Helmut Reiser |

Christian Zens

Geschäftsführung: Dr. Christian Grimm | Alina Hain

VR AG Charlottenburg 7729B | USt.-ID. DE 136623822

      To
        unsubscribe, send this message:
        mailto:address@concealed?subject=unsubscribe%20cat-users
        Or use the following link:
        https://lists.geant.org/sympa/sigrequest/cat-users
    
-- 
Tomasz Wolniewicz

Attachment: smime.p7s
Description: Kryptograficzna sygnatura S/MIME