Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
en:services:network_services:eduroam:android [2019/03/02 08:43]
tkoerme
en:services:network_services:eduroam:android [2019/06/28 11:30] (current)
0spohl
Line 1: Line 1:
-====== eduroam mit Android =====+====== eduroam mit Android ​(4.4.4+)===== 
 +**In order to ensure a secure eduroam configuration,​ it is strongly recommended that you set up eduroam via the CAT app using the configuration wizard (CAT tool)!**
  
 **Notice when changing the password of your GWDG account:** \\ **Notice when changing the password of your GWDG account:** \\
 If you change your password for your GWDG account after setting up the eduroam profile, the password must also be changed on your Android device. Otherwise the network connection cannot be established. If you change your password for your GWDG account after setting up the eduroam profile, the password must also be changed on your Android device. Otherwise the network connection cannot be established.
  
-===== Setting up the eduroam ​WLAN with the CAT tool =====+===== Setting up the eduroam with the CAT tool =====
  
 1. The configuration wizard (CAT app) is required to ensure secure configuration. This can be obtained from the [[https://​play.google.com/​store/​apps/​details?​id=uk.ac.swansea.eduroamcat|Google PlayStore]]. ​ 1. The configuration wizard (CAT app) is required to ensure secure configuration. This can be obtained from the [[https://​play.google.com/​store/​apps/​details?​id=uk.ac.swansea.eduroamcat|Google PlayStore]]. ​
 Please pay attention to the provider information "​GÉANT Association"​. Alternatively,​ you can download [[https://​cat.eduroam.org/​eduroamCAT-stable.apk|APK]] directly from DFN.  Please pay attention to the provider information "​GÉANT Association"​. Alternatively,​ you can download [[https://​cat.eduroam.org/​eduroamCAT-stable.apk|APK]] directly from DFN. 
  
-2. After you have installed the "​eduroamCAT App", open the app and select the eduroam profile ​for the **University of Göttingen and GWDG**. If your institute ​has set up its own profile file on the "​GÉANT Association"​ page, use it.+2. After you have installed the "​eduroamCAT App", open the app and select the eduroam profile ​of your institute. Employees and students of the University of Goettingen please choose ​**University of Goettingen**. Users with a GWDG account please select **GWDG Goettingen**. If your institution ​has set up its own profile file on the "​GÉANT Association"​ page, please ​use it. 
  
-3.1. If the location service is activated in your telephone ​and you are currently in Goettingen, the **GWDG Goettingen** ​should be displayed ​on the start page of the app under "​Nearby Configs"​. Alternatively,​ you can enter the **GWDG Goettingen** in the app on the start page via "​Manual Search"​. ​Please ​select **GWDG Goettingen** ​now. A summary of the configuration file will now appear. To install, ​press the "​Install"​ button. ​+3.1. If the location service is activated in your phone and you are currently in Goettingen, ​you should see the **University of Goettingen** and the **GWDG Goettingen** ​under "​Configurations in the Surroundings" ​on the start page of the app. Alternatively,​ you can enter the **University of Goettingen** or the **GWDG Goettingen** in the app on the start page via "​Manual Search"​. ​Users with a GWDG account should then select **GWDG Goettingen**. A summary of the configuration file will now appear. To install, ​click on the "​Install"​ button. ​
  
 {{ :​en:​services:​network_services:​eduroam:​android_eduroam-install_eng_15.jpg?​300 |}} {{ :​en:​services:​network_services:​eduroam:​android_eduroam-install_eng_15.jpg?​300 |}}
Line 38: Line 39:
 {{ :​en:​services:​network_services:​eduroam:​android_eduroam-install_eng_09.jpg?​300 |}} {{ :​en:​services:​network_services:​eduroam:​android_eduroam-install_eng_09.jpg?​300 |}}
  
-5. Then enter your [[en:​services:​network_services:​eduroam:#​username|username]] ​and password. Use the username ​according to the [[en:​services:​network_services:​eduroam:#​username|table Username]] in the Username section of this article. ​ Then continue with "​Install"​. ​+5. Then enter your e-mail address ​and password. Use the e-mail address ​according to the [[en:​services:​network_services:​eduroam:#​username|table Username]] in the Username section of this article. ​ Then continue with "​Install"​. ​
  
 {{ :​en:​services:​network_services:​eduroam:​android_eduroam-install_eng_10.jpg?​300 |}} {{ :​en:​services:​network_services:​eduroam:​android_eduroam-install_eng_10.jpg?​300 |}}
Line 46: Line 47:
 {{ :​en:​services:​network_services:​eduroam:​android_eduroam-install_eng_11.jpg?​300 |}} {{ :​en:​services:​network_services:​eduroam:​android_eduroam-install_eng_11.jpg?​300 |}}
  
 +Please **do not delete** the eduroam CAT-Tool after completing the installation,​ otherwise the eduroam profile will also be deleted!
  
 =====Manual eduroam configuration===== =====Manual eduroam configuration=====
Line 51: Line 53:
 <WRAP center round important 80%> <WRAP center round important 80%>
 **Please use the CAT-App to ensure a secure configuration!** **Please use the CAT-App to ensure a secure configuration!**
- 
-Manual configuration should only be used in exceptional cases, since no secure certificate check can be established on Android devices manually. 
 </​WRAP>​ </​WRAP>​
  
-These instructions show how to configure the Android OS release mobile device settings to establish eduroam connection manually. ​ 
 Only perform the manual configuration if it is not possible to configure an eduroam connection using  Only perform the manual configuration if it is not possible to configure an eduroam connection using 
-[[de:​services:​network_services:​eduroam:​android| CAT (Configuration Assistant Tool)]] . +[[de:​services:​network_services:​eduroam:​android| CAT (Configuration Assistant Tool)]]. These instructions show how to configure the Android OS release mobile device settings to establish eduroam connection manually.  
-Various ​Android ​devices ​may slightly different screen layouts.+ 
 +====Instructions for installing the root certificate for WLAN use==== 
 +In order to establish a secure connection with eduroam, it is necessary to have the root certificate loaded and installed. Although the certificate is already included in Android, it is used by default only for VPN and applications,​ but not for Wi-Fi. For this purpose it must be reinstalled. Make sure you have set up an Internet connection by going to the Settings under "​Wireless & networks"​ and selecting "​Wi-Fi"​ or "​Mobile data". Please note cellular data may cause additional costs depending on your provider.  
 + 
 +**Download certificate** \\ 
 +You can download the current root certificate for „T-Telesec Global Root Class 2“ (valid until Oktober 1, 2033) using following [[https://​pki.pca.dfn.de/​dfn-ca-global-g2/​pub/​cacert/​rootcert.crt | link]] and then install it on your device. 
 + 
 +A link is also available at [[http://​android.gwdg.de| android.gwdg.de]] in the category "​Schnellzugriff"​ -> "​Root-Zertifikat herunterladen"​. 
 +Alternatively,​ you can first download * .crt file to your PC and then transfer the file using e.g. USB cable to your Android device. 
 + 
 +**Install certificate** \\ 
 +Now you are ready to install the CA certificate on your device. Go to the download folder in the file manager (Explorer) and tap the certificate file. If you have no screenlock set so far, you will be prompted to set up a trusted screenlock for your device. The system will redirect you to the device'​s security settings for setting up a screenlock. In the "Name the Certificate"​ dialog, you assign a name to the certificate. For the eduroam connection, select **Wi-Fi** or **WLAN**. For apps and VPN connections,​ select **VPN and Apps**. Finally, tap **OK**.
  
-====Root certificate for Wi-Fi use====+{{ :​en:​services:​network_services:​eduroam:​android:​ca_certificate.png?​200 |}}
  
-**Watch your step!** In order to establish ​secure connection with eduroam, it is necessary to have the root certificate loaded ​and installed. Although ​the certificate is already included ​in Android, it is used by default only for VPN and applications,​ but not for Wi-FiFor this purpose it must be reinstalled.+**CA certificate Installation using Barcode Scanner** \\ 
 +Select the QR Scanner or Barcode Scanner App from your device. If you do not have Barcode scanner on your deviceyou can install ​it via Play Store. Scan one of the following QR codes and open the detected link in browser. 
 +|[[https://​www.pki.dfn.de/​fileadmin/​PKI/​zertifikate/​T-TeleSec_GlobalRoot_Class_2.crt| T-Telesec Global Root Class 2]]| \\ 
 +{{:​de:​services:​network_services:​eduroam:​android:​telekom-root-zertifikat.png?200|}} |
  
-Follow the steps linked [[en:​services:​network_services:​eduroam:​android:​ca-certificate#​download_certificate| here]] to download and install the root certificate for wireless usage. 
  
-**Note:** The root certificate ​must be reinstalled after deleting ​wireless profile ​that used the certificate.+Install the certificate ​file by choosing the name and purpose. After confirming your entries, you will receive ​pop-up message indicating ​that the certificate ​has been successfully installed.
  
-**Attention:​** ​If necessary, delete an existing eduroam Wi-Fi profile in order to properly configure the certificate verification. To delete or edit a Wi-Fi profile, tap and hold on the existing Wi-Fi profile and select the option to remove from the context menu. +===Note when deleting a WLAN profile=== 
 +The root certificate must be reinstalled after deleting a wireless profile that used the certificate. Please note that for some Android devices it is not possible to reuse a name that has already been assigned. ​If necessary, delete an existing eduroam Wi-Fi profile in order to properly configure the certificate verification. To delete or edit a Wi-Fi profile, tap and hold on the existing Wi-Fi profile and select the option to remove from the context menu. 
  
 {{  :​en:​services:​network_services:​eduroam:​android:​android_eduroam-install_eng_13.jpg?​200 ​ |}} {{  :​en:​services:​network_services:​eduroam:​android:​android_eduroam-install_eng_13.jpg?​200 ​ |}}
  
-==== Manual ​Configuration Guide ====+==== Manual ​eduroam configuration guide ====
 **Please note that the menu navigation of different Android devices (depending on the manufacturer) may differ slightly.** **Please note that the menu navigation of different Android devices (depending on the manufacturer) may differ slightly.**
  
-If you are in the reception area of the eduroam WLAN network, tap -> **Settings** → **Connections** → **Wi-Fi** to select the **eduroam** network. To display the available networks, your Wi-Fi must be activated. In a new window, you will be prompted to enter the **eduroam configuration parameters** (see [[en:​services:​network_services:​eduroam:​android:​android_5#​eduroam_configuration_table| eduroam configuration table]]). ​+If you are in the reception area of the eduroam WLAN network, tap -> **Settings** → **Connections** → **Wi-Fi** to select the **eduroam** network. To display the available networks, your Wi-Fi must be activated. In a new window, you will be prompted to enter the **eduroam configuration parameters** (see [[en:​services:​network_services:​eduroam:​android:#​eduroam_configuration_table| eduroam configuration table]]). ​
  
 The screenshot for the network settings shows the login data for a GWDG account as an example. ​ The screenshot for the network settings shows the login data for a GWDG account as an example. ​
 As "​Identity"​ enter your username according to the table in the section [[en:​services:​network_services:​eduroam:#​username|Username]]. ​ As "​Identity"​ enter your username according to the table in the section [[en:​services:​network_services:​eduroam:#​username|Username]]. ​
-Please enter **eduroam@** as "​Anonymous identity" ​and then the REALM according to your institute. Use the table of the section [[en:​services:​network_services:​eduroam:#​username|Username]]. Some Android devices expect the domain to be entered. Please enter **eduroam.gwdg.de** here. Once the correct information has been entered and confirmed, the connection to the eduroam Wi-Fi network is established permanently. ​+Please enter **eduroam@gwdg.de** as "​Anonymous identity"​. Some Android devices expect the domain to be entered. Please enter **eduroam.gwdg.de** here. Once the correct information has been entered and confirmed, the connection to the eduroam Wi-Fi network is established permanently. ​
  
 {{ :​en:​services:​network_services:​eduroam:​android_eduroam-install_eng_12.jpg?​200 |}} {{ :​en:​services:​network_services:​eduroam:​android_eduroam-install_eng_12.jpg?​200 |}}
  
 If you are out of range of the eduroam Wi-Fi network, you can set up eduroam manually via -> **Settings** → **Connections** → **Wi-Fi** → **Add network**. ​ In the window that opens, you will be asked to enter the  If you are out of range of the eduroam Wi-Fi network, you can set up eduroam manually via -> **Settings** → **Connections** → **Wi-Fi** → **Add network**. ​ In the window that opens, you will be asked to enter the 
- ​[[en:​services:​network_services:​eduroam:​android:​android_5#​eduroam_configuration_table| eduroam configuration parameters]] (see also the screenshot for the network settings).+ ​[[en:​services:​network_services:​eduroam:​android:#​eduroam_configuration_table| eduroam configuration parameters]] (see also the screenshot for the network settings).
  
 {{ :​en:​services:​network_services:​eduroam:​android:​android_eduroam-install_eng_14.jpg?​200 |}} {{ :​en:​services:​network_services:​eduroam:​android:​android_eduroam-install_eng_14.jpg?​200 |}}
Line 95: Line 108:
 | ** CA certificate** \\ (see [[|Root certificate]]) ​                      | T-Telesec Global Root Class 2 \\ (valid until Oktober 1, 2033)  | | ** CA certificate** \\ (see [[|Root certificate]]) ​                      | T-Telesec Global Root Class 2 \\ (valid until Oktober 1, 2033)  |
 | ** Identity** \\  (see section [[https://​info.gwdg.de/​docs/​doku.php?​id=en:​services:​network_services:​eduroam:​start#​username| Username]]) ​ | your username ​                                                  | | ** Identity** \\  (see section [[https://​info.gwdg.de/​docs/​doku.php?​id=en:​services:​network_services:​eduroam:​start#​username| Username]]) ​ | your username ​                                                  |
-| ** Anonymous identity** \\  (see section [[https://​info.gwdg.de/​docs/​doku.php?​id=en:​services:​network_services:​eduroam:​start#​username| Username]]) ​                                                     ​| eduroam@gwdg.de ​                                      |+| ** Anonymous identity** \\            | eduroam@gwdg.de ​                                      |
 | **Password** ​                                                                                                                    | The same password as you use for logging into the GWDG portal. You can tick "Show password"​ checkbox, if you wish to check the password is entered correctly. ​                                                                  || | **Password** ​                                                                                                                    | The same password as you use for logging into the GWDG portal. You can tick "Show password"​ checkbox, if you wish to check the password is entered correctly. ​                                                                  ||