Supplicants

The aim of this section is only to give a deeper understanding of supplicants. For actual configuration, you should use eduroam CAT. The

Appendix C Supplicants

This section describes the configuration of the following supplicants:

...

These supplicants are either Open Source or integrated into the Operating System, therefore there are no
licence fees to consider. The main difference between these supplicants is the degree to which they can be
preconfigured. Note that the WPA_supplicant can be used on either Unix or Windows platforms because of its
open source nature.

C.1 MacOS 10.5

These instructions are valid for Mac OS X 10.5 (Leopard) update 4. Please note that previous updates of
Leopard had a different user interface. Future updates could also change this interface and the instructions in
this document could be wrong or not accurate. Mac OS X Versions 10.7 and above are supported by eduroam CAT.

...

• The certificate presented by the RADIUS server being contacted is valid but not signed by any of the
  Certification Authorities recognised by your computer. To prevent this, any new Certification Authority
  should be added using the KeyChain Access tool. If you are confident that you are talking to the right
  server, and that the certificate presented by the server contains all the certification path, you can trust
  this certificate (any additional checks can be carried out by expanding the certificate information if
  necessary).
• The certificate presented by the RADIUS server is invalid or self-signed. In this case do not trust the
  certificate.

C.3 iPhone

The preferred way to generate configuration profiles for iPhone, iPad and Mac OS X is eduroam CAT. The remainder of this section is only interesting for you if you do not want to make use of eduroam CAT for this purpose.

...

You can also download profiles sent to your iPhone.

C.3.1 Using the configuration utility

To configure your iPhone for eduroam:

...

RECREATE 1st SCREENSHOT p 105 HERE

C.3.2 Downloading a profile

You can receive a profile on your iPhone. An example is shown below:

...

If you decide to install this profile, you will be connected to eduroam:

C.2 wpa_supplicant

wpa_supplicant (http://hostap.epitest.fi/wpa_supplicant/) is an open source 802.1x supplicant for Linux, BSD
and MS Windows. This section describes its use on the Linux platform. wpa_supplicant is available for most
modern Linux distributions and seems to be the focal point of 802.1X development on the *nix platform.

...

This utility allows campus administrators to create a configuration script that can be distributed to the users.
The script contains all necessary certificates, scans the system for the needed tools and creates configuration
files, certificate files, sets up the main starting script and wrappers. A full description is beyond the scope of this
document, but can be found in the documentation of the package.

C.3 Intel PROSet/Wireless supplicant

This supplicant (shipped with Intel Centrino chipsets) makes it very easy for an administrator to prepare and
distribute a pre-configured supplicant configuration.

C.3.1 Preparing the profile as an administrator

As an IdP administrator, first create a configuration for yourself in the supplicant. It is suggested that you use a
proper anonymous outer identity of "@realm" (your realm, with nothing left of the @ sign) as the "Roaming
Identity". Now, verify that the settings are correct by connecting to eduroam.

...

Distribute the generated file to your users.

C.3.2 Installing the profile as a user

A simple double-click will install the profile on the user's supplicant. When the user tries to connect for the first
time, he will be prompted for his own username and password.

...