The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Martin Stanislav <address@concealed>]

Hi Prem.

Configuration profile as published by the University of Canberra
via eduroam CAT currently points at "DigiCert Global Root CA".

Whereas a certicate the University of Canberra has deployed 
on EAP server points at "DigiCert Global Root G2".

You have to update University of Canberra configuration profile settings
at eduroam CAT [1]. Please, contact AARnet support [2] in case you've lost
admin access to eduroam CAT portal.

Kind regards,
Martin

[1] 
https://wiki.geant.org/spaces/H2eduroam/pages/1595932680/A+guide+to+eduroam+CAT+for+IdP+administrators+ver.+2.2.2

[2] 
https://support.aarnet.edu.au/hc/en-us/articles/13362857245967-What-is-the-eduroam-Configuration-Assistant-Tool-CAT


On Fri, Oct 02, 2026 at 03:20:42AM +0000, "Prem.Muthuramalingam" wrote:
> Hi Team,
> 
> We have been reported the below by a user on the CAT application. Can you 
> please check and advise.
> 
> Symptom: connecting with the official CAT-published CA certificate pinned, 
> plus domain-suffix-match set to auth.canberra.edu.au (as specified in your 
> CAT profile and student wireless docs), consistently fails. On Linux, the 
> connection associates to the AP and then drops within roughly 150-350ms, 
> before any EAP negotiation appears in the debug logs. On Android, strict CA 
> pinning via the geteduroam app fails the same way.
> 
> "Switching to "use system certificates" (broad trust store validation 
> instead of pinning to the specific published CA) works reliably on both 
> devices, with the domain match unchanged."
> 
> No other user reported this issue till now.
> 
> Regards,
> Prem Anand
> Network Support
> IT and Cyber (IT&C)
> T +61 2 6206 8981
> University of Canberra | 11 Kirinari St, Bruce ACT 2617
> Log and track your tickets here<https://servicedesk.canberra.edu.au/>
> Feedback on my service is always welcome! You can email my manager at 
> address@concealed<mailto:address@concealed>
> [Learning belongs to everyone - U CAN @ UC] 
> <https://www.canberra.edu.au/future-students/?utm_source=email+signatures&utm_medium=gif&utm_campaign=Brand+2026>
> ________________________________
> [University of Canberra]        [Everyone's invited | Living our values]
> The Ngunnawal people are the Traditional Custodians of the ACT where UC's 
> Bruce Campus is situated and are an integral and celebrated part of UC's 
> culture. We also acknowledge other First Nations Peoples.
> Australian Government Higher Education Registered Provider (CRICOS) 
> #00212K. TEQSA Provider ID: PRV12003 (Australian University) | Email 
> Disclaimer 
> <https://www.canberra.edu.au/about-uc/disclaimer-copyright-privacy-accessibility>
> [UC Facebook] <https://www.facebook.com/UniversityOfCanberra>           [UC 
> Instagram]  <https://www.instagram.com/unicanberra/>                [UC 
> LinkedIn]  <https://au.linkedin.com/school/university-of-canberra/>         
>         [UC YouTube]  <https://www.youtube.com/user/uniofcanberra>          
>     [canberra.edu.au]  <https://www.canberra.edu.au>
> To unsubscribe, send this message: 
> mailto:address@concealed?subject=unsubscribe%20cat-users
> Or use the following link: 
> https://lists.geant.org/sympa/sigrequest/cat-users