Craig You might want to check the documentation on the JANET Communities website where the people responsible for Eduroam in the UK have put together good instructions for all things Eduroam.
Section 7 covers the certificates. https://community.ja.net/library/janet-services-documentation/implementing-eduroam-roadmap Good luck, _________________________________ Tomo | Senior Infrastructure Engineer - Networks, Telecoms & Security. Direct line +44 (0)20 7000 7777 www.london.edu<http://www.london.edu/> | London experience. World impact. Connect with us: [Description: twitter.jpg] <https://twitter.com/LondonBSchool> Follow us on Twitter<https://twitter.com/LondonBSchool> [Description: facebook.jpg] <http://www.facebook.com/pages/London-United-Kingdom/London-Business-School/14027365105> Become a fan on Facebook<http://www.facebook.com/pages/London-United-Kingdom/London-Business-School/14027365105> From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Craig Simons Sent: 24 March 2014 18:03 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Best practices for 802.1x (TTLS/PEAP) certificates We're nearing the expiry of our current 802.1x certificate and we need to generate a new signing request. I see a reference on one page (https://confluence.terena.org/display/H2eduroam/eduroam+IdP) about configuring additional certificate properties. Not being a certificate guru, I'm normally just content to find whatever openssl command example to generate a new key and csr and have it signed, but it looks as though I might be missing some important details. Does anyone have any best practices or examples of how to properly generate an 802.1x signing request or are these things that are done through the CA interface? Regards, Craig SFU SIMON FRASER UNIVERSITY Network Services Craig Simons Network and Systems Administrator Phone: 778-782-8036 Cell: 604-649-7977 Email: craigsim...@sfu.ca<mailto:craigsim...@sfu.ca> Twitter: simonscraig<http://www.twitter.com/simonscraig> ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
<<inline: image001.jpg>>
<<inline: image002.jpg>>
