...
Create a new configuration profile by highlighting Configuration profiles and pressing New.
Now load the Eduroam CA certificate into the profile by selecting Credentials | Configure and selecting the file containing the CA certificate (in our example eduroam-example-edu-au-cacert.der).
Now do the bulk of the configuration by selecting Wifi | Configure and completing the form.
...
| Protocols | |
|---|---|
| Accepted EAP Types | TTLS, PEAP |
| Inner authentication (for TTLS) | PAP |
The choice of TTLS or PEAP or both depends on which EAPs your RADIUS server and authentication backend support.
| Authentication | |
|---|---|
| Username | Leave this blank, then the installer of the profile will be prompted for their user name |
| Use Per-Connection Password | Y |
| Outer Identity | anonymous@example.edu.au |
The outer authentication should end in your site's domain name. "anonymous" is a common username, it doesn't have to be a real user-name as the outer identity is used for routing the Eduroam authentication request to the correct RADIUS server – it is the inner identity which is used for authentication.
| Trust | |
|---|---|
| Trusted Certificates | example.edu.au |
This is the certificated which we loaded into the profile earlier.
Finally, export the profile to a file by highlighting the profile and pressing Export. I have chosen not to sign the configuration, so that any user can install it.
You are then prompted for a filename.
...