In order to assist institutions in standardising best practice end-device configuration, the global eduroam Operations Team hosts an eduroam Configuration Assistant Tool (CAT). CAT imports information about an institution’s eduroam deployment from the global eduroam database, and builds a specific configuration for it.
Advantages of using CAT
CAT offers several advantages to both institutions and eduroam users. It will:
- Create the eduroam profile that will connect only with the expected authentication certificate (CN). User devices will not request the user to accept authentication server certificates blindly.
- Ensure the user device has the required signing certificates to verify the authentication server certificate.
- Ensure that user outer identity in RADIUS authentication packet can be labelled anonymous.
- Ensure that the eduroam profile is set up the same way regardless of operating system or brand of mobile device.
Get access to CAT for your administrators
AARNet, as the National Roaming Operator for eduroam AU, sets up accounts for all institution administrators wanting to modify information in CAT.
Email support@aarnet.edu.au to request access. Include a list of administrators you want to authorise to access institutional configuration data, and their email addresses.
Once set up, AARNet will send an invitation email to each administrator on your list. This email will include a link to activate their CAT access. Once the person clicks the link and sets up their account, they can use CAT to modify their institution’s information.
Log in to CAT
- Go to https://cat.eduroam.org.
- Click Manage → eduroam® admin access.
- Click Login.
- Scroll to find your institution, or enter part of your institution name in the search box to filter the institution list.
- If you access https://admin.eduroam.edu.au using AAF Virtual Home, click AAF Virtual Home.
- If your institution is not listed under eduGAIN, click the experimental tab, select AARNet SAML Proxy, then search for your institution.
Note: your institution may not appear under eduGAIN if it has not opted in. To request inclusion, please contact AAF. For more details, see the eduGAIN Identity Provider Information Pack.
- Select your institution's name.
- Enter your login details.
Configure CAT for your institution
- Fill in the general organisation details (country, organisation name, logo) for your institution.
- Create a new RADIUS/EAP profile.
Note: you can create a profile for every realm that your institution RADIUS server supports. - Profile Description (default/other languages): e.g. Profile for all AARNet Staff
- Profile Display Name (default/other languages): e.g. AARNet eduroam Profile
- Production-Ready: on
- Realm: e.g. aarnet.edu.au
- Enable Anonymous Outer Identity: yes e.g. anonymous, user
- Enforce realm suffix in username: yes
- Select the supported EAP types.
- Support: E-Mail (default/other languages): e.g. support@aarnet.edu.au
- Upload all CA certificate files including intermediate and root.
- Provide the CN of authentication server certificate.
Test your institution’s information in CAT
Once all information is provided to CAT, you can test the settings you provided.
CAT installer
- Go to https://cat.eduroam.org/.
- Click Click here to download your eduroam® installer.
geteduroam app
- Go to https://www.geteduroam.app/.
- Download the relevant version of the geteduroam app for your mobile device.
Once testing is complete, you can advise end-users regarding the use of CAT installers for their devices to access eduroam.