Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

On some iOS versions, and some phones (such as Samsung phones) it actually means that it was successful, but it didn't connect to eduroam. The best way to check is to turn Wi-Fi off, wait a few moments, and then turn it back on. Then check in the Wi-Fi settings whether it has connected to eduroam. If the problem persists, please also check point 8 below, or let your IT department know and ask them to escalate it to us. We'll try and find out why this happens.
 
If you are using an HONOR phone (with MagicOS 7.1 / Android 13), read on for a potential solution for you!

...

Using geteduroam on a HONOR phone with Android 13 fails to work! It complains about an invalid profile, but no other Android 13 phone has this issue! 

The problem is not your phone per se, but it's not the eduroam CAT profile either. If the profile installs fine on other Android 13 phones, it appears that there is an issue with a Google Android API that Google wants developers to use now, but on the HONOR it fails for an unknown reason.

...

The eduroam SSID is case-sensitive and must be all lower-case (e.g. 'eduroam'). If your organisation has set up an SSID called 'Eduroam' or 'EDUROAM' (or any other variation), please ask them to fix it because that breaches the eduroam technical specification except in limited circumstances. Some national eduroam operators allow networks to start with 'eduroam' (mostly where various institutions have overlapping eduroam networks, known as the Russell Square Problemproblem), but in those cases, the eduroam CAT profile should set that institution-specific SSID up up in addition to 'eduroam'.

...

Unfortunately there was a bug in iOS 15 and iOS 15.1 that prevented apps (like geteduroam) from installing certificates in profiles like eduroam's. The file from the eduroam CAT website is an Apple Configurator profile (a .mobileconfig file), so that continued to work. Apple confirmed that this bug was fixed in iOS 15.2. Please upgrade your phone to iOS 15.2 and geteduroam should function as it did before you upgraded to iOS 15 or 15.1.

...

Using geteduroam on Android 12 fails. It installed the profile but it won't authenticate! This worked before upgrading to Android 12! 

Android 12 has become a lot stricter in its requirements without specifying what was changed. As part of our investigation into this, we discovered that Android 12 strictly applies the X.509 certificate specification (i.e. it will not apply any workarounds that have worked in past versions or with older operating systems), and it also blocks certificates signed with the obsolete SHA1 and MD5 hashing algorithms.

The eduroam EAP Server Certificate considerations page specifies which settings the server certificate should (read, must) comply with. Your IT department can verify their server certificate with the command: openssl verify -x509_strict -verbose -CAfile <ca.certificate> <server.certificate>. An OK message means it will comply with the strict specification. Additionally, your IT department should verify the profile in question with Android 12 or later to check that it connects OK.

...

Using geteduroam on Windows, but the laptop won't let me download it and tells me to go to the Microsoft Store! What's going on? 

The chances are that you are running on Windows 10 or Windows 11 in what's called 'S-mode'. This is the default setting that Windows 10 and 11 are configured as when you buy a new laptop. Microsoft has an FAQ about S-mode here: https://support.microsoft.com/en-gb/windows/windows-10-and-windows-11-in-s-mode-faq-851057d6-1ee9-b9e5-c30b-93baebeebc85

...

geteduroam only makes changes for you, so if you are sharing your laptop, only when you log in will it connect to eduroam using your user details as provided/instructed by your instutition. If anyone else sharing the laptop with their own account needs to use eduroam too, they must run geteduroam themselves and then set it up with their own account details. This should also mean that you are not responsible for anything your friend or fellow student does online when they've logged into their account on the laptop. However, if

Note: If you all use the same account on the laptop, whoever set up the connection first will be responsible for all the usage unless someone changes the eduroam settings.

...

  • What device (phone, tablet, laptop) do you use? The make and the model will be very helpful.
  • What version of operating system does it run? A screenshot can be very helpful:
    On iOS, you can look in the Settings under General, About for the Software Version.
    On Android, you can look in the Settings under About phone, Software Information. 
    On Windows, you should be able to look in the 'Help' menu under 'About' to get more information
    On macOS, go to the Apple menu, then choose 'About this Mac'.
  • Which version of geteduroam are you running?
    On Android, go to Settings, then Apps, find 'geteduroam', tap it and scroll to the bottom.
    On iOS, go to General, iPhone Storage, search for 'geteduroam' and tap it. 
    On Windows, it will probably be an executable you had to download. 
  • What did you try and do. Note each step down, or, if you can, take screenshots.
  • Send all of this to your helpdesk, or post this to the cat-users mailing list by subscribing, or email eduroamatjisc@gmail.com with your report, and one of the Jisc someone from the eduroam UK folks will collate the information and liaise with the developers.

...