Once the chosen EAP method is configured and the IdP RADIUS server is connected to the authentication backend, the next step is to provision the access configuration to the actual end users.
Many operating systems support IEEE 802.1X and EAP authentication, but the user interfaces in supplicants differ significantly. For some supplicants, manually clicking through a series of GUI pages is the only option. This is sometimes tedious for end users.
If possible, an IdP administrator should prepare pre-configured packages which contain the necessary information to securely connect to eduroam:
- the SSID: "eduroam"
- the crypto setting: WPA2/AES
- the EAP type setting
- the CA that issued the eduroam IdP server's EAP server certificate
- the Common Name in the eduroam IdP server's EAP server certificate
The following sections describe a series of tools that can be used to create such auto-installers. The use of one these is recommended, because it will likely have a positive effect on user uptake, and reduce helpdesk load.
Deployment tools
PLEASE ADD TEXT
su1x
PLEASE ADD TEXT
XpressConnect (Cloudpath)
...