...

A full access WEB API makes it possible to create different user interfaces to CAT. In particular you can list countries with configured institutions, list institutions globally or within a country, list profiles within institution, ask for the institution logo or even geolocate users's IP address and, of course download installers for given user profiles and devices.

...

Windows installers features

CAT 1.1 Windows installers can be run silently with the /S flag, which is useful for institutions which want to build the installers into their own, larger onesinstitutions which want to build the installers into their own, larger ones.

if you run the installer with -debug=n (where n can be from 1 to 4) to turn on various levels of debugging. The log is written into the CAT.log file and also temporary profile XML files used for setting up the network are not deleted. One of these files will contain the actual login credentials, to delete them it is easiest to run the installer again without the debug flag.

Linux installer features

The Linux installer is a Python 3 script. It is meant to interact with the Network Manager and for GUI uses one of tkinter, zenity, kdialog, yad and if none is found it falls back to simple text. If you are not using Network Manager then you could still generate a complete configuration file for either spa_supplicant or iwd. Run the installer with --help option to see more details.

Replacing the RADIUS server root CA certificate

When your RADIUS server's root CA certificate is about to expire and you need to replace it with a new one, the new CA certificate needs to be communicated to all your users' devices. The procedure to achieve this is as follows:1. Create a new “migration”

1. Modify your eduroam profile in eduroam CAT,

...

1. to contain both the current and new root CA certificates

...

1. .

...

2. Require all new and existing end-users to download the

...

1. modified profile. Their devices

...

1. will then be capable of trusting both the current and the new CA, and will accept server certificates from either CA.

...

1. Once you are confident that all end-user devices have

...

1. the “migration” profile installed, apply the new server certificate

...

1. on the Radius server(s). Ideally, the host name in the certificate CN/subjectAltNames should be identical to the old server certificate.

...

2. Modify the eduroam profile in eduroam CAT

...

1. by deleting the

...

1. old root

...

1. certificate

...

1. .

Getting Help with eduroam CAT

...