Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
en:services:network_services:eduroam:start [2019/06/12 12:18]
ugerdesa [Setting up the eduroam with the Configuration Wizard]
en:services:network_services:eduroam:start [2019/07/15 14:43] (current)
tkoerme [eduroam setup]
Line 1: Line 1:
 ====== eduroam ====== ====== eduroam ======
  
-Education Roaming ([[https://​www.eduroam.org/​|eduroam]]is a worldwide Internet access service for educational and research institutions ​and their staff and students. It enables Internet access at the sites of all participating organisations using their own username ​and password+=====What is eduroam?​===== 
 +[[https://​www.eduroam.org/​|Education Roaming (eduroam)]] is a worldwide Internet access service for members of educational and research institutions. The accounts of the GWDG, the staff and students ​of the University ​of Göttingen, the University Medicine Göttingen UMG and many Max Planck Institutes are eduroam-enabled. Eduroam uses an encrypted WLAN connection ([[http://​en.wikipedia.org/​wiki/​Wi-Fi_Protected_Access#​WPA2|WPA2 Enterprise]]).
  
-In order to use eduroam an eduroam compatible, valid account with one of the participating institutions is required. The accounts of the GWDG (employees and students of the university) and of the Max-Planck-Institute are eduroam compatible. Eduroam is an encrypted radio link ([[http://​en.wikipedia.org/​wiki/​Wi-Fi_Protected_Access#​WPA2|WPA2]]). 
  
-Please always follow our instructions or programs when setting up the eduroam ​on your device and do not use the automatic functions ​of your device. ​Many systems use only weak security checks or no security checks at all for automatic setting, which could allow an attacker to intercept your password at any timeHe only needs to be within radio range of your device+===== eduroam setup===== 
 +We strongly recommend to setup eduroam with the[[https://​cat.eduroam.org/| configuration wizard (CAT tool)]]. Do not use the automatisms ​of your device. ​The CAT tool is provided by the GÉANT Associationof which the DFN-Verein is a memberThe CAT tool is available for Windows, macOS, Linux, Chrome OS, iOS and Android.
  
-**To ensure a secure ​eduroam ​configuration,​ it is strongly recommended to set up eduroam ​using the configuration wizard (CAT tool)!**+[[https://​cat.eduroam.org/|{{ :​de:​services:​network_services:​eduroam:​qr-educat_s3.png?​direct&​200 | }}]]
  
-=====Important ​change ​in the use of eduroam=====+Please follow our [[#​Instructions|detailed instructions with screenshots]] for the different operating systems. 
 +   
 +**Important ​for iOS devices:​**\\ 
 +If the device is connected to eduroam during installation,​ the new eduroam profile will not be installed correctly under iOS. 
 +This means that if an eduroam profile already exists, it must first be uninstalled. Next, "​Ignore this network"​ must be selected ​in the WLAN settings for eduroam. Only then will the reinstallation ​of the eduroam ​profile run smoothly. For example, the eduroam profile can be downloaded and installed via the WLAN "​GuestOnCampus"​ or via mobile radio (LTE, UMTS).
  
-<WRAP center round important 85%> 
-In the context of the expiration of the root certificate “Deutsche Telekom Root CA 2“ on July 10, 2019, which has been announced for some time, the certificate used to encrypt the login process in WLAN eduroam will expire on July 1, 2019. For all concerned users, there is an urgent need for action to be able to use the popular and wide-spread eduroam access even after this date. 
  
-**The GWDG recommends an early installation of eduroam with the new required settings before 30 June 2019! ** +**Important for Windows Mobile devices:**\\ 
-</​WRAP>​+Please note that your eduroam access must be activated by the GWDG for Windows Mobile devices. Please contact [[support@gwdg.de]] for this. If your registration still does not work, you must install the new Telekom root certificate "​T-TeleSec Global Root Class 2" on your device. There is no CAT tool for Windows Mobile. So you need to set up eduroam manually. ​
  
-====Why does the Wi-Fi configuration for eduroam have to be changed?==== +==== Instructions ​==== 
-As you may have already learned, the current root certificate "​Deutsche Telekom Root CA 2" (Generation 1), which is also used for the W-Fi eduroam ​at the GWDG and the University of Göttingen, expires on July 10, 2019 and loses its validityIt will be replaced by the new root certificate "​T-TeleSec Global Root Class 2" (Generation 2)For devices on which Wi-Fi eduroam ​is installed and which use an intermediate certification chain of the still valid old generation 1 and not already of the new generation 2, the validity period will be shortened to June 30, 2019, deviating from the root certificate "​Deutsche Telekom Root CA 2"​. ​+=== eduroam tutorials ​for PC systems === 
 +  * [[windows_8|Windows]] 
 +  * [[en:​services:​network_services:​eduroam:​windows_s|Windows S]] 
 +  * [[en:​services:​it_consulting:​apple_consulting_center:​mac_network:​mac_wlan|macOS]] 
 +  * [[linux_ubuntu_14.04|Linux / Ubuntu 14.04]] 
 +  * [[en:​services:​network_services:​eduroam:​linux_wpa_supplicant|wpa_supplicant]]
  
-Therefore, the GWDG's eduroam authentication servers will only accept the new root certificate "​T-TeleSec Global Root Class 2" after June 30, 2019. For all devices with eduroam access that have not yet installed the new root certificate,​ this means that Wi-Fi eduroam must be set up again if eduroam is to continue to be used. After June 30, 2019, registration with the old root certificate will no longer be possible. The Wi-Fi configuration can, of course, still be reset at any time after this date. There will be no further disadvantages in the case of late subsequent new setup, with the exception of the missing possibility of using eduroam; in particular, no security problems will result from this. 
  
 +=== eduroam tutorials for mobile devices ===
  
-====Which users need to change their Wi-Fi configuration for eduroam?==== +  * [[apple iphone| iOS]] 
-Not all users have to change their Wi-Fi configuration for eduroam, because many devices already include the new certificate and the associated external identity eduroam@gwdg.de in the Wi-Fi configuration for eduroam.+  * [[en:​services:​network_services:​eduroam:​android|Android]] 
 +  * [[en:​services:​network_services:​eduroam:​windows_mobile|Windows Mobile]]
  
-If you used the CAT tool provided by DFN-Verein when setting up eduroam access with an account managed by GWDG, your device may already have the new root certificate and the external identity eduroam@gwdg.de installed in the eduroam profile. For users who have installed the eduroam profile on their devices at https://​cat.eduroam.org via the organisations "​University of Göttingen"​ and "​GWDG",​ the new root certificate and the external identity eduroam@gwdg.de were already added to the CAT tool in autumn 2017. For the Max Planck Institutes, whose eduroam profiles are maintained by the GWDG at https://​cat.eduroam.org,​ this was done in autumn 2018. +==== Username ====
- +
-Unfortunately,​ the manual check as to whether the new root certificate and the external identity eduroam@gwdg.de have already been installed in the eduroam profile of a device differs greatly depending on the operating system used and is in many cases only cumbersome or even impossible without more precise expertise. We therefore recommend in any case that you set up your eduroam account as soon as possible if you cannot determine a clearly positive result. +
- +
-====How should the W-Fi configuration for eduroam be changed?​===== +
-In order to enforce a stricter, roaming-compliant eduroam configuration in the future and to avoid errors, the eduroam access should no longer be set up manually if possible, but only with the help of the user-friendly CAT tools of the GÉANT organisation at https://​cat.eduroam.org,​ which also includes the DFN-Verein. This allows the desired eduroam profiles to be quickly and securely installed over the network for all operating systems supported by DFN-Verein. The eduroam-CAT (eduroam Configuration Assistant Tool) provides automatic eduroam configuration wizards for Windows, macOS, Linux, Chrome OS, iOS and Android. +
- +
-This also ensures that the new root certificate and - equally important - the external identity eduroam@gwdg.de are implemented in the eduroam profile. After June 30, 2019, only users with an external identity eduroam@gwdg.de will be able to log on to the Wi-Fi eduroam. +
- +
-Instructions for downloading the CAT tool and setting up eduroam for the various operating systems are available [[#​tutorials|here]]. If you have any questions regarding the conversion of Wi-Fi eduroam, please do not hesitate to contact us at https://​www.gwdg.de/​support or send an e-mail to support@gwdg.de . +
- +
- +
-===== Setting up the eduroam with the Configuration Wizard ===== +
- +
-The eduroam CAT (eduroam Configuration Assistant Tool) is a GÉANT Association powered web site that provides automatic Eduroam configuration wizards for Windows, macOS, Linux, Chrome OS, iOS, and Android. The assistants for Goettingen can be found [[https://​cat.eduroam.org/​|here]]. More detailed instructions on how to use the wizards and how to manage problems can be found in the operating system specific articles linked in the [[#​tutorials|Tutorials]] section. +
- +
-[[https://​cat.eduroam.org/?​idp=5055|{{ :​de:​services:​network_services:​eduroam:​qr-educat_s3.png?​direct&​600 | }}]] +
- +
-===== Username ​=====+
 <WRAP center round box 100%> <WRAP center round box 100%>
 When you are asked for your username enter your username in the following manner: When you are asked for your username enter your username in the following manner:
Line 79: Line 70:
 </​WRAP>​ </​WRAP>​
  
 +=====Important change in the use of eduroam=====
  
-===== Tutorials ===== +<WRAP center round important 85%> 
-==== eduroam ​tutorials ​for PC systems ==== +In the context of the expiration of the root certificate “Deutsche Telekom Root CA 2“ on July 10, 2019, which has been announced for some time, the certificate used to encrypt the login process in WLAN eduroam ​will expire on July 1, 2019. For all concerned users, there is an urgent need for action to be able to use the popular and wide-spread ​eduroam ​access even after this date.
-  * [[windows_8|Windows]] +
-  * [[en:​services:​network_services:​eduroam:​windows_s|Windows S]] +
-  * [[en:​services:​it_consulting:​apple_consulting_center:​mac_network:​mac_wlan|macOS]] +
-  * [[linux_ubuntu_14.04|Linux / Ubuntu 14.04]] +
-  * [[en:​services:​network_services:​eduroam:​linux_wpa_supplicant|wpa_supplicant]]+
  
 +For a more detailed information about the changed configuration refer to [[en:​services:​network_services:​eduroam:​change|this article]].
 +</​WRAP>​
  
-==== eduroam tutorials for mobile devices ==== 
- 
-  * [[apple iphone| iOS]] 
-  * [[en:​services:​network_services:​eduroam:​android|Android]] 
-  * [[en:​services:​network_services:​eduroam:​windows_mobile|Windows Mobile]]