Skip to Content.
Sympa Menu

geteduroam - Re: CA Certificate rollover and Remove/Disable SSID media property honoring

Subject: An open discussion list for topics related to the geteduroam service

List archive

Re: CA Certificate rollover and Remove/Disable SSID media property honoring


Chronological Thread  
    < Chronological >       < Thread >
  • From: Stefan Paetow <Stefan.Paetow AT jisc.ac.uk>
  • To: "geteduroam AT lists.geant.org" <geteduroam AT lists.geant.org>
  • Subject: Re: CA Certificate rollover and Remove/Disable SSID media property honoring
  • Date: Mon, 13 Oct 2025 14:05:43 +0000
  • Accept-language: en-GB, en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jisc.ac.uk; dmarc=pass action=none header.from=jisc.ac.uk; dkim=pass header.d=jisc.ac.uk; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=bHNHy9HgN9LLIR2VWvjP7sL0STZ1NjEo0hQWVywqV4w=; b=e5T+0ZE45BfwqXfmHM5T1Sc4fETNtVDWdjdLJj49amLFMd7thZr6V0aGfCGDmnIP1KF5QjoVzhmUG/WE0vUNqfrzcj+ZQlLmfeiurjk/5YG53k8pDSeWPHoWNgDDqWQtOZCu+5TrxE7qQGy6kTD8Clz7GxXZh9Ofbypw8CHErJPynDqL1t/73x0/DJPYmicTLK1sf8mhZyL19Jmwm8aZrAHwWsFq07RHgEkokEvDOgA/gy8ic+Ym2bEQ5wHsvPYDxZdUD7jN9e+L/vW7ie4kCvnCvOryaYg9kCLljelz2qa0vJV8E7BOlBxkYTyfeWKNkIVamxKPs8NWBaN03GjB9g==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=KFqokV29YEei+51eYzeX8YYoNBkZIpPB3JDu1FeAZQsCjZ+wDpL7GQBquY64eodny1r/4SjEdsSZ2bmDVYqguhk+YuoN6xF6tUefoFz8z8bsytvvCwfthCq/Wju4OtkyibhEKE0zTs3M6OIUyCckuNvFzl9DNC3KsuJzf09DVtrL90CrEcjsN+b1m4rMGXaG/nAjKFsDnV1OmrHxumuFbcx8Mdwzy5fK+Q9CjMHzAHjQApb3BVjtl2WvSQn5o0q/7jA74wyy87bXucAZw28EogmICmUE0bo13/1ey8Hpf3UttOuiw8uX1KVxjON8FfWReCaruNCd0ZVOweXSwsZhlg==
  • Authentication-results: mail.geant.org; dkim=pass (2048-bit key; unprotected) header.d=jisc.ac.uk header.i= AT jisc.ac.uk header.a=rsa-sha256 header.s=selector1 header.b=b27GqkCQ; dkim-atps=neutral
  • Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=jisc.ac.uk;
  • Msip_labels: MSIP_Label_190374fc-c2b5-4c8e-bee8-6305ebc1550a_Enabled=true;MSIP_Label_190374fc-c2b5-4c8e-bee8-6305ebc1550a_Name=External;MSIP_Label_190374fc-c2b5-4c8e-bee8-6305ebc1550a_ActionId=5e9a9c1b-ba33-4195-ba1f-2fc64abd0668;MSIP_Label_190374fc-c2b5-4c8e-bee8-6305ebc1550a_Tag=50, 0, 1, 1;MSIP_Label_190374fc-c2b5-4c8e-bee8-6305ebc1550a_SetDate=2025-10-13T14:03:37Z;MSIP_Label_190374fc-c2b5-4c8e-bee8-6305ebc1550a_SiteId=48f9394d-8a14-4d27-82a6-f35f12361205;MSIP_Label_190374fc-c2b5-4c8e-bee8-6305ebc1550a_Enabled=true;MSIP_Label_190374fc-c2b5-4c8e-bee8-6305ebc1550a_ContentBits=0;MSIP_Label_190374fc-c2b5-4c8e-bee8-6305ebc1550a_Method=Privileged;

Hi Daniele,

 

So you said you added the setup network's SSID into the Remove/Disable SSID part of the profile?

 

That's odd… AFAIK geteduroam removes those, but I will have to confirm on Friday when I'm back in my lab to try. :-/

 

With kind regards

 

Stefan Paetow

Federated Roaming Technical Specialist

eduroam(UK), Jisc

 

email/teams: stefan.paetow AT jisc.ac.uk

gpg: 0x3FCE5142

 

For eduroam support, please contact the eduroam team via help AT jisc.ac.uk and mark it for eduroam’s attention.

I am not available on Mondays and Fridays between 12:00 and 15:00 London time (UTC in winter, UTC+0100 in summer).

 

Note: I don’t expect a reply outside of your working hours, since I work internationally with colleagues in different nationalities with different religions, customs, and holidays. Reply when it is convenient for you.

 

Jisc is a registered charity (in England and Wales under charity number 1149740; in Scotland under charity number SC053607) and a company limited by guarantee registered in England under company number 05747339, VAT number GB 197 0632 86. Jisc's registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.

 

Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.

 

For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice

 

 

From: <geteduroam-request AT lists.geant.org> on behalf of "geteduroam AT lists.geant.org" <geteduroam AT lists.geant.org>
Reply to: ALBRIZIO DANIELE <albrizio AT units.it>
Date: Monday, 13 October 2025 at 14:32
To: "geteduroam AT lists.geant.org" <geteduroam AT lists.geant.org>
Cc: NETWORK ADMINISTRATORS <netadmin AT units.it>
Subject: CA Certificate rollover and Remove/Disable SSID media property honoring

 

We are in the process of rolling over from Sectigo to HARICA CA and asking our users to install the new installer configuration.

 

We are encountering an increasing/huge amount of devices still connecting to our setup network.

We tried to do a fresh install on a Samsung A55 android 15 using geteduroam but after correct configuration we noticed that the setup network was still saved, ready to connect despite having it typed in into Remove/Disable SSID media property in CAT.

 

Does geteduroam not honor this feature?

 

Only on android platform or on all platforms?

 

Do someone know if there is a CAT feature adoption matrix, per installer, per OS, published somewhere?

 

 

--

 

Daniele Albrizio

Ufficio Reti e Telefonia | Networks and Telephony Office
Università degli Studi di Trieste | University of Trieste
Via Alfonso Valerio 12 - 34127 Trieste (Italy)
daniele.albrizio AT units.it
Tel. | Ph. +39 040 558 3319

Ufficio Reti e Telefonia | Networks and Telephony Office
Tel. | Ph. +39 040 558 3331


Archive powered by MHonArc 2.6.19+.

Top of Page