Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
en:wifistd [2018-11-27 10:29] – Thomas Thiel | en:wifistd [2024-03-29 12:41] – Thomas Thiel | ||
---|---|---|---|
Line 1: | Line 1: | ||
==== WiFi Access ==== | ==== WiFi Access ==== | ||
- | Everyone who is in possession of valid login credentials to central systems of the c.s. dept. or the b-it has the opportunity to use our wifi networks to access the local resources and of course the internet. Please follow | + | Everyone who is in possession of valid login credentials to central systems of the c.s. dept. or the b-it has the opportunity to use our wifi networks to access the local resources and of course the internet. Please follow |
+ | |||
+ | If you intend to connect to the WiFi services provided by us, please make sure that you are running only recent software and operating systems that are receiving security patches. **You are not allowed to connect to our networks without making sure that you have the most recent security updates applied to your device, so please keep your systems safe!** | ||
We secured our WiFi Network mainly via TTLS, so make sure you have the necessary root certificate installed and do not forget to check the fingerprints of the used Certificates. Here are the current fingerprints: | We secured our WiFi Network mainly via TTLS, so make sure you have the necessary root certificate installed and do not forget to check the fingerprints of the used Certificates. Here are the current fingerprints: | ||
+ | |||
+ | Current Certificates: | ||
+ | |||
+ | ise0.informatik.uni-bonn.de: | ||
^ Hashtype ^ Fingerprint ^ | ^ Hashtype ^ Fingerprint ^ | ||
- | | MD5 | + | | MD5 |
- | | SHA1 | FD:DD:2E:79:CB:E2:02:AB:A7:E6:B6:AE:C8:AC:05:B6:55:8D:36:F5 | | + | | SHA1 | 50:1A:A7:0A:22:66:BB:39:DA:4C:5D:6B:5B:16:BE:D3:F3:CD:4E:E8 | |
- | | SHA256 | + | | SHA256 |
+ | \\ | ||
+ | |||
+ | ise1.informatik.uni-bonn.de: | ||
+ | |||
+ | ^ Hashtype ^ Fingerprint ^ | ||
+ | | MD5 | 57: | ||
+ | | SHA1 | 03:8E:CB:86: | ||
+ | | SHA256 | D1: | ||
+ | \\ | ||
+ | |||
+ | ise2.informatik.uni-bonn.de: | ||
+ | |||
+ | ^ Hashtype ^ Fingerprint ^ | ||
+ | | MD5 | 19: | ||
+ | | SHA1 | 7C:F9:70:F6:3F:6E: | ||
+ | | SHA256 | E9: | ||
+ | \\ | ||
+ | |||
+ | All certificates are signed by "GEANT OV RSA CA 4", GEANT Vereniging, NL. | ||
=== Generic Parameters === | === Generic Parameters === | ||
Line 20: | Line 45: | ||
| Keytype | | Keytype | ||
| Phase 2 Authentification | | Phase 2 Authentification | ||
- | | Root Certificate | + | | CA Certificate |
- | | valid CN (Common Name) Radius-Server Certificates | + | | valid CN (Common Name) Radius-Server Certificates |
- | | Anonymous Identity | + | | Anonymous Identity |
- | | Identity | + | | Identity |
+ | | Domain (Android 11) | ise0.informatik.uni-bonn.de | ||
| Authentification Server | | Authentification Server | ||
- | === Windows | + | === Windows |
- | If you want to use our wifi network on your Windows System (for all releases starting with Windows Vista), we provide a [[http:// | + | If you want to use our wifi network on your Windows System (for all releases starting with Windows Vista), we provide a |
+ | [[https:// | ||
- | After the installation you just have to issue your username (including the correct domain, i.e. username@informatik.uni-bonn.de for the c.s. dept. or username@bit.uni-bonn.de) and of course your password. | + | After the installation you just have to issue your username (including the correct domain, i.e. username@informatik.uni-bonn.de for the c.s. dept. or username@bit.uni-bonn.de. Please use username@wlan.informatik.uni-bonn.de for the [[en: |
=== Windows 7 === | === Windows 7 === | ||
- | Users of windows 7 do not have the luxury of native TTLS Support, so it has to be provided by an external supplicant. One of these supplicants is GEANTLink, which is part of the [[https:// | + | Users of windows 7 do not have the luxury of native TTLS Support, so it has to be provided by an external supplicant. One of these supplicants is GEANTLink, which is part of the [[https:// |
- | After the installation of GEANTLink using one of the methods specified above, we provide a [[http:// | + | After the installation of GEANTLink using one of the methods specified above, we provide a [[https:// |
- | After the installation you just have to issue your username (including the correct domain, i.e. username@informatik.uni-bonn.de for the c.s. dept. or username@bit.uni-bonn.de) and of course your password. | + | After the installation you just have to issue your username (including the correct domain, i.e. username@informatik.uni-bonn.de for the c.s. dept. or username@bit.uni-bonn.de. Please use username@wlan.informatik.uni-bonn.de for the [[en: |
=== Android === | === Android === | ||
+ | |||
+ | {{ : | ||
For recent Android versions (>4.0), the configuration of wifi at the computer science dept. is rather simple. Just connect to the SSID “802.1X” and fill in the configuration dialog with the Values from the table [[#Generic Parameters|above]] (-> Generic Parameters). | For recent Android versions (>4.0), the configuration of wifi at the computer science dept. is rather simple. Just connect to the SSID “802.1X” and fill in the configuration dialog with the Values from the table [[#Generic Parameters|above]] (-> Generic Parameters). | ||
- | If your system cannot use the root certificates installed to verify the wifi certificate, | + | If your system cannot use the root certificates installed to verify the wifi certificate, |
=== MacOS/IOS === | === MacOS/IOS === | ||
+ | [[ : | ||
+ | [[ : | ||
+ | \\ | ||
For all Apple products which do not support configuring wifi connection parameters manually, we provide a connection-profile for your convenience: | For all Apple products which do not support configuring wifi connection parameters manually, we provide a connection-profile for your convenience: | ||
- | ^ Apple Mobile config Profile: | [[https:// | + | ^ Apple Mobile config Profile: | [[https:// |
\\ | \\ | ||
+ |