We are SecureW2 for EAP-TLS. In addition to working well, and handling the recent Android changes fairly well, I’ll commend their excellent support staff. They are always quick to respond and extremely knowledgeable about all things CA related.
A word to those looking to go EAP-TLS, whether securew2 or not ... you have to make lots of important decisions up front (particularly around your CA structure) and then live with them, basically, forever. Talk to a number of other institutions about how they’ve named & labeled things before beginning to onboard users. Norman Elton William & Mary On Wed, Apr 7, 2021 at 2:55 PM Adam T. Ferrero <a...@temple.edu> wrote: > > > I love the geteduroam app! It is awesome, easy, pretty, and simple. We > are planning to leverage it for more of our onboarding. > > > > We are open SSID with Aruba Clearpass captive portal, SMS texted > credentials for self service guests (via Twilio), and switch to WPA2 > enterprise for actual internet access. We’d been using Aruba OS specific > landing pages to feed their Quick Connect tool to onboard. Aruba is > encouraging Onboard rather than Quick Connect but that comes with license > fees. With Android 11 changes and a desired to deprecate our PEAP/MSCHAP > we’ve been spending time here. > > > > Still a work in progress but geteduroam app is a win! Nice work to that > team! > > > > Adam > > > > *From:* The EDUCAUSE Wireless Issues Community Group Listserv < > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> *On Behalf Of *Philippe Hanset > *Sent:* Wednesday, April 7, 2021 10:55 AM > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > *Subject:* [External] Re: [WIRELESS-LAN] WLAN onboarding > > > > Lee, > > > > Based on your timeframe you might also want to consider the new > development that is done in Europe called “geteduroam”. > > https://www.geteduroam.app > > It is App based and will feed from CAT but it is based on EAP-TLS or on > EAP-TTLS/PEAP if preferred. > > > > So you could start with CAT and username/password (CAT allows you to > provision eduroam and other SSIDs as well) and evolve later to EAP-TLS. > > > > Philippe > > > > > > Philippe Hanset, CEO > www.anyroam.net > Operator of eduroam-US > +1 (865) 236-0770 > > > > > > > > On Apr 7, 2021, at 10:05 AM, Lee H Badman < > 000000db5b77bd95-dmarc-requ...@listserv.educause.edu> wrote: > > > > Hello everyone, hope your semesters are going along smoothly and that you > are all staying healthy. As always- this message is not an invite for > vendors to contact me. > > > > Looking out down our short timeline, we need to make a number of decisions > about various aspects of our WLAN operations. One of these decision points > is if/how to do the 802.1X onboarding after our current solution goes End > of Everything at year’s end. To that end, I’m looking for any and all > feedback on these questions: > > - If you are using PEAP/MS-CHAP v2, what is your onboarder of choice (even > if none, with manual config as methodology)? > > -If you are doing PEAP-TLS, what is your onboarder of choice? > > -Have you recently piloted any onboarders that you just hate for any > reason? > > -For those using eduroam as your 802.1X environment, have you found the > free configuration tool to be reliable? Any downsides to using it at scale? > > > > Interested in 3rd party, native, whatever. > > > > Thanks as always, > > > > Lee Badman > > > > *Lee Badman* | Network Architect (CWNE#200) > > Information Technology Services > (NDD Group) > 206 Machinery Hall > 120 Smith Drive > <https://www.google.com/maps/search/120+Smith+Drive+%0D%0ASyracuse,+New+York+13244?entry=gmail&source=g> > Syracuse, New York 13244 > <https://www.google.com/maps/search/120+Smith+Drive+%0D%0ASyracuse,+New+York+13244?entry=gmail&source=g> > > *t* 315.443.3003 * e* lhbad...@syr.edu *w* its.syr.edu > > Campus Wireless Policy: > https://answers.syr.edu/display/network/Wireless+Network+and+Systems > > *SYRACUSE UNIVERSITY* > syr.edu > > > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire > community list. If you want to reply only to the person who sent the > message, copy and paste their email address and forward the email reply. > Additional participation and subscription information can be found at > https://www.educause.edu/community > > > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire > community list. If you want to reply only to the person who sent the > message, copy and paste their email address and forward the email reply. > Additional participation and subscription information can be found at > https://www.educause.edu/community > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire > community list. If you want to reply only to the person who sent the > message, copy and paste their email address and forward the email reply. > Additional participation and subscription information can be found at > https://www.educause.edu/community > ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
