19
edits
Changes
→Android Instructions
Quick and dirty options for validating the eduroam certificate, in order from least secure to most secure:
# Do not validate: you will get online, but consider are vulnerable to leaking your connection network credentials and connecting to be as secure as a public hotspotrouge network.# (Android 7.1+ only) Use system certificates: This will check to make sure the certificate chains back to some CA in the system cert store. This is significantly better than no validation, but still not very good. You may also need to specify a domain. If so, use "eduroam.nis.vt.edu" or "nis.vt.edu"
# Download and import the USERTrust Root CA: detailed instructions to come. Since you are still not checking the CN, it is only marginally better than using system certificates.
# Use the [https://play.google.com/store/apps/details?id=uk.ac.swansea.eduroamcat eduroam CAT] tool: this will setup the whole wireless profile and use the correct CA and verify the CN. As such, it is the preferred method. Warning, it is ugly. If you have an existing "eduroam" profile, you will need to remove it. When it prompts for the username and password, use <YOUR-PID>@vt.edu and your network password. It relies on geolocation to prompt for the profile for the right school. You may need to go outside to get a good GPS signal. If it is able to do geo-ip (e.g., you are connected to the "VirginiaTech" SSID), it gets you close enough.
NOTE: Android 11 does not allow not verifying the server certificate.
==Frequently Asked Questions==
