Linux and Unix Users Group at Virginia Teck Wiki - User contributions [en]

EAP-TLS (OLD)

2013-09-09T22:19:49Z

2001:468:C80:4391:59B6:F94D:75AB:5BA2:

This article describes how to setup '''EAP-TLS''' on various Linux distributions. EAP-TLS is a strong wireless authentication scheme of choice for many large institutions such as universities and corporations and is used by Virginia Tech for connections to [[VT-Wireless]].

==Obtain the VT-Wireless Certificate==
Regardless of what program you use to make your connection, you will need to [https://netcert.cns.vt.edu/netcert/ obtain your p12 certificate and password from CNS], which is needed to establish your connection. Note the certificate password; you can save it permanently if you'd like; but you will only need it during set up.



{{raw:u:EAP-TLS|ssid=VT-Wireless|ca_cert=/etc/ssl/certs/GlobalSign_Root_CA.pem|identity=PID}}

[[Category:Howtos]]

Main page

2013-09-09T22:18:10Z

2001:468:C80:4391:59B6:F94D:75AB:5BA2:

The [[gp:Linux and Unix Users Group Wiki|Linux and Unix Users Group at Virginia Tech Wiki]] is a [[gp:free information|free reference]]. Its purpose is to document how to make the most of Virginia Tech and other resources by utilizing *nix operating systems. Many articles on this site are templates from the VTLUUG-pioneered [[u:Main page|Uniluug project]], in hopes of fostering greater collaboration between university Linux and Unix user groups.

'''Note: The wiki now uses LDAP login so you can login with the same password you use to access acidburn. We're working on making account creation easier, but until then please contact [https://vtluug.org/about/ an officer] if you need help logging in.

==Featured Material==
<categorytree | mode=pages>Featured content</categorytree>

==Browse Wiki by Category==
<categorytree | mode=pages>Root</categorytree>

==[[VTLUUG:Calendar|Calendar]]==
{{:VTLUUG:Calendar}}

==Roadmap==
{{:Project list}}

==Why Join?==
{{:VTLUUG:Benefits}}

==About this wiki==
This wiki was intended to support *nix usage on campus. Here are suggested items for this wiki:
* Anything related to Linux usage, such as tutorials and other documentation, especially related to that at VT
* Anything related to VTLUUG (meeting minutes, infrastructure, projects, history, etc)
* Technical projects that VTLUUG members (individually or collectively) have done
* General geekery that doesn't fit anywhere else, related to interests of one or more VTLUUG members (e.g. audio gear, coffee, amateur radio, etc.)
* Opinionated content that may not reflect the interests of the entire Virginia Tech or Blacksburg community

Some items are more suited for [[gp:Main page|Gobblerpedia]], our sister wiki. These include:
* General content about Blacksburg or Virginia Tech that is ''non-technical'' in nature. Please categorize these with [[:Category:Move to Gobblerpedia|Move to Gobblerpedia]] so we can later migrate them in bulk.

Virginia Tech Wifi

2013-09-09T21:47:03Z

2001:468:C80:4391:59B6:F94D:75AB:5BA2:

<font color="red">Warning: Use of PEAP-MSCHAPv2 to connect to the Virginia Tech network is strongly discouraged by the Linux and Unix Users Group due to attacks that allow all traffic to be decrypted with a 100% success rate.</font>

'''PEAP-MSCHAPv2''' is a wireless authentication scheme used by Virginia Tech as an alternative to [[EAP-TLS]] for connections to [[VT-Wireless]].

At DefCon 20 in July 2012, an attack was announced for MSCHAPv2 that allows the protocol to be cracked quickly with a 100% success rate.<ref>[https://www.cloudcracker.com/blog/2012/07/29/cracking-ms-chap-v2/]</ref> '''Use of MSCHAPv2 is strongly discouraged.'''

==Set your remote access passphrase==
Regardless of what software you use to establish your connection, you must first set your remote passphrase by going to [https://my.vt.edu my.vt.edu]→Settings→Change Network Password.


{{raw:u:PEAP-MSCHAP|ssid=VT-Wireless|networks=VT-Wireless or VT_WLAN|network="VT-Wireless"|credentials=PID and remote access (or [[Hokies ID]]) passphrase}}

==References==
<references/>

[[Category:Howtos]]