Eduroam: Switch profile (Android)

The root certificate "Deutsche Telekom Root CA2" expires on the 7th of July 2019. This root certificate was used by the DFN to enroll the certificates of the TU Bergakademie Freiberg.

The recommended configuration for eduroam includes the certificate check against this expiring root certificate.

All clients that are configured with the obsolete configuration will not be able to connect to eduroam after the 7th of Juli 2019. We provide new configuration files for the eduroamCAT since March 2019.

You are advised to update your configuration as soon as possible, but by the 7th of July 2019 at the latest.

We strongly recommend to use the eduroamCAT-app. If you still want to configure your profile manually you can find information about the updating process here.

Switch to eduroamCAT from manual configuration

If you configured your eduroam profile manually we recommend to switch to the eduroamCAT app. Please follow the instructions below.

Switch the eduroam profile using an existing eduroamCAT installation

If you already use the eduroamCAT app follow these steps:

eduroamCAT: delete old profile

Step 1: Remove the old profile.

Open the eduroamCAT app and switch to the "PROFILES" tab.

Tap on "Remove Profile" button to remove the existing profile.

Close the eduroamCAT app and open it again.


 

Step 2: Search the new profileeduroamCAT: search for TU Bergakademie Freiberg

Now the app provides you the nearest locations of eduroam network providers.

If you are near or in Freiberg you should see the entry for "TU Bergakademie Freiberg". Tap on it to start the download of the new profile.

If you do not see an entry named "TU Bergakademie Freiberg" you are maybe to far away from the location or you disabled the geolocation service. Use the "Manual Search" on the bottom of the page end enter "freiberg" into the search field. Afterwards you should see the appropriate entry in the list.


download the config fileStep 3: Download the new profile.

Chose TU Bergakademie Freiberg as institution.

If your operating system and version was not recognized by default, chose it from the installer list.

Proceed by tapping on the "Do you have an account at this institution?" button.


download the config file - part 2

You will see a short summary and some concat information. Tap on the "Download Installer for <your operating system>" button.

The configuration file will be downloaded.

Open the configuration file. If the eduroamCAT app pops up, proceed with step 4.

If the eduroamCAT app does not start automatically to to step 3a.


eduroamCAT: open config fileStep 3a:

Use the hamburger button (three vertical dots) and tap on "Select config File".


eduroamCAT: select new config fileStep 3b:

Navigate to the folder where you saved the new downloaded configuration file (usually Downloads).

Chose the file named "eduroam-android-<version>-TUBF-eduroam_TU_Bergakademie_Freiberg.eap-config".


eduroamCAT: install the profileStep 4:

The new configuration should look like shown in the left screenshot. You will the new new root certificate "T-TeleSec Gobal Root Class 2".

Install the new profile by tapping on "Install".


eduroamCAT: confirm installationStep 5:

Confirm the installation by tapping on "Yes".

 



eduroamCAT: installation successfulStep 6:

You will be asked to enter your credentials.

Username: use your URZ login name appended by "@tu-freiberg.de". For example "mmusterattu-freiberg [dot] de".

 Password: your URZ password.


Manual switch of the root certificate

An existing manual configuration can be updated by changing the root certificate and the anonymous (respectively outer) identity.

QR Code zum Telekom Root Zertifikat beim DFNDownload the root certificate "T-Telesec Global Root Class 2" from https://www.pki.dfn.de/fileadmin/PKI/zertifikate/T-TeleSec_GlobalRoot_Class_2.crt manually or scan the QR code on the left.


install certificateYou will be prompted to name the certificate, use something recognizable like"Telesec G2".

Note: Some Androids have problems when special characters are used in the certificate's name. So use only alphanumeric characters.

Chose "Wi-Fi" as Credential User.

Proceed with"OK".


Android: Zertifikat installieren, EntsperrmusterIf your phone does not have a secured area to store certificated this area will be set up now.

You might be asked to confirm the installation by entering your PIN or using your unlock pattern.


Android. Settings - WifiOpen the settings and tap on "Network & Internet".


Android: Network and Internet, Wi FiNow tap on "Wi-Fi".


Android. settings - WIFI - eduroamIf the eduroam network is reachable from your current position it will be shown.

Depending on your Android version you have to:

- Tap and hold your finger on the eduroam entry until a menu pops up. Then chose "Modify Network" (shown left)

- Or you have to open the eduroam entry by tapping one time on it and modify it by tapping on the pencil (or the Android specific "edit" icon) in the upper right corner.


Android: eduroam configurationChange the following configuration options:

CA-Certificate: Telesec G2 (or whatever you named it in the step before)
Anonymous Identity: eduroamattu-freiberg [dot] de

Your overall configuration should look like show on the left.

Important:

Identity must have the suffix "@tu-freiberg.de"

Save the configuration and reconnect to the eduroam network.


Switch to eduroamCAT from manual configuration

If you configured your eduroam profile manually in the past and want to switch to eduroamCAT, you have to remove the previous (manual) configured profile.


Settings, edit Wi FiOpen "Settings" and chose "Network & Internet".


Chose "WAndroid: Wifii-Fi".


chose network eduroamSearch the network "eduroam" an tap on it.


delete profileTap on "FORGET" to delete the profile.


Now follow the steps in the how-to eduroam for Android .