geteduroam is a Windows application designed to simplify the setup of eduroam on end-users' computers by automatically fetching and installing the required certificates. This tool streamlines the configuration process, ensuring seamless access to secure wireless networks.
Key Features:
Automatically detects and installs necessary certificates for eduroam connectivity.
Supports multiple authentication methods, including PEAP-MSCHAPv2, TLS, TTLS-PAP, and others.
Integrates with Windows Task Scheduler to periodically check for updates or profile changes.
Audience & Benefit:
Ideal for universities, research institutions, and their IT staff who need to deploy eduroam wireless networks efficiently. By automating certificate installation and configuration, geteduroam reduces the complexity of network setup, minimizing user support requests and improving overall network reliability.
The application can be installed via winget, making it easy to incorporate into institutional deployment processes.
README
eduroam app for Windows
This application helps set up eduroam on end-users' computers by automatically fetching and installing the required certificates.
Structure
WpfApp: The graphical user interface and UX logic.
EduroamConfigure: The logic interfacing with the discovery api, and the logic to parse and configure the various profiles into windows.
Supported authentication modes
The following EAP methods can be fully configured:
PEAP-MSCHAPv2
TLS
TTLS-PAP
TTLS-MSCHAP
TTLS-MSCHAPv2
TTLS-EAP-MSCHAPv2
The only exception is that on PEAP-MSCHAPv2, the OuterIdentity must have the same realm as the username.
This is a limitation set by Windows.
For all modes, you can also install Hotspot 2.0.
Installation
After a change to the system has been made, geteduroam will install itself to %HOME%\AppData\Local\geteduroam.
It will add itself to the registry to be listed in installed programs, how to uninstall it, and a task will be registered with
the task scheduler, which will prompt geteduroam check for updates on the profile.
A tray icon for running in the background can be enabled through a project flag, but it is disabled by default.