The Roaming solution for the public sector https://wiki.govroam.uk/ 2026-05-01T12:19:57+00:00 https://wiki.govroam.uk/ https://wiki.govroam.uk/lib/exe/fetch.php?media=wiki:logo.png text/html 2021-10-12T13:46:48+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:2021-10_advisory_mutual_authentication_server_certificate_validation&rev=1634046408&do=diff Advisory: addressing claims of misconfiguration vulnerabilities Published: 12/10/2021 This advisory applies to all organisations providing a Home or Home and Visited (Wi-Fi) service. Recently Jisc, its CSIRT, and the UK govroam and eduroam teams were made aware of an article on ThreatPost text/html 2026-01-19T08:13:34+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:accessibility_statement&rev=1768810414&do=diff Accessibility statement for wiki.govroam.uk This accessibility statement applies to wiki.govroam.uk. This website is run by the govroam team at Jisc, using DokuWiki. The site is designed for use by nominated technical contacts at customer organisations. text/html 2024-07-11T12:21:01+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:advisories&rev=1720700461&do=diff Advisories Blast RADIUS text/html 2024-07-11T12:22:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:blast_radius&rev=1720700523&do=diff govroam response to the Blast!RADIUS vulnerability This advisory is the eduroam response to the attack “Blast!RADIUS – RADIUS/UDP considered harmful” as published on 09 July 2024 at <https://blastradius.fail> . Readers are encouraged to read the FAQs on that website and text/html 2022-05-27T12:39:28+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:chargeable_user_identity&rev=1653655168&do=diff How is the CUI useful? In the world of govroam (and 802.1X in general) when a user visits another site, the only information the a site has to identify the user is their outer identity and their calling station id (MAC address). Whilst this information is useful (when coupled with authentication event timestamp and IP address) without liaison with the Home site it is insufficient to provide a definitive identifier for the individual. This presents difficulties for the enforcement of AUP and the… text/html 2025-01-28T10:25:38+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:cookiepolicy&rev=1738059938&do=diff Cookies Policy Last updated: October 25, 2024 This Cookies Policy explains what Cookies are and how We use them. You should read this policy so You can understand what type of cookies We use, or the information We collect using Cookies and how that information is used. This Cookies Policy has been created with the help of the Cookies Policy Generator. text/html 2024-12-13T09:59:41+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:eap_server_certificate&rev=1734083981&do=diff EAP Server Certificate considerations Original Almost all EAP types in govroam (with the exception of EAP-PWD) require an X.509 server certificate with which the RADIUS server identifies itself to the end user before the user sends their credentials to the server. text/html 2024-08-02T10:02:26+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:faq&rev=1722592946&do=diff Govroam FAQ Onboarding Q: We're a public sector organisation and would like to join Govroam, what are the next steps? A: Contact <govroam@jisc.ac.uk> and you'll be sent all the appropriate documentation for joining. The full boarding form needs filling out completely. It asks for contact information, information about your RADIUS servers and various other pieces of information. If you're joining as a Federation, please fill in the text/html 2025-08-21T06:06:01+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:frequently_asked_questions&rev=1755756361&do=diff Govroam FAQ Onboarding Q: We're a public sector organisation and would like to join Govroam, what are the next steps? A: Contact <govroam@jisc.ac.uk> and you'll be sent all the appropriate documentation for joining. The full boarding form needs filling out completely. It asks for contact information, information about your RADIUS servers and various other pieces of information. If you're joining as a Federation, please fill in the text/html 2024-05-16T08:31:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:fticks&rev=1715848276&do=diff FTICKS Logging The Jisc NRPS keep a log of successful roams between organisation connected to them. However, about 90% of roams happen within Federations so this data is not visible. To gain a complete picture of roaming Federations need to send their own roaming information to a central point. text/html 2022-12-06T11:02:57+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:how_to_deal_with_fragmentation_of_eap_packets&rev=1670324577&do=diff Dealing with packet fragmentation with EAP-TLS Symptoms * If you're receiving reports from end users of authentication failing and you can't see anything in your logs. * If you're using EAP-TLS * If you're seeing firewall reports of potential packet fragmentation attacks from RADIUS servers. text/html 2025-03-28T14:53:18+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:implementing_govroam&rev=1743173598&do=diff Implementing Govroam Roadmap Concepts and Terminology It is recommended that organisations planning to implement Govroam familiarise themselves with the concepts and terminology described in the [High Level Architecture] document. Notes and Caveats This document is based on modified eduroam implementation guide. text/html 2024-11-22T09:54:33+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:retro-fitting_fticks_logging_to_freeradius&rev=1732269273&do=diff Retro-fitting FTICKS to FreeRADIUS For a brief explanation of FTICKS and why they're useful. What we're trying to achieve is for an RFO to send us logs of just the successful authentications happening between your registerted organisations (i.e. not the ones proxies to and from the Jisc NRPS). text/html 2024-03-18T11:35:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:start&rev=1710761756&do=diff Public Section FAQ FICKS logging Chargeable User Identity Notifications [IOS14 Privacy MACs release] 2021-10 Advisory: Mutal Authentication Server Certificate Validation text/html 2023-08-01T07:12:11+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:test&rev=1690873931&do=diff Test Accessibility Test page. Run tests against this page. text/html 2025-12-02T10:46:40+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:testing_tools&rev=1764672400&do=diff Testing tools The main tool used for end-to-end RADIUS testing is eapol_test. This emulates a full 802.1x authentication from the client. There are other tools but they just emulate a simple RADIUS authentication. We strongly recommend using this approach when doing initial RADIUS testing; there are too many idiosyncrasies with actual clients and wireless systems to be confident that you're testing properly. text/html 2023-08-25T15:33:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.govroam.uk/doku.php?id=public:unpacking_.tar.gpg.zip_file&rev=1692977588&do=diff Details file If you've been sent a file containing the RADIUS server information then you'll need to uncompress, decrypt and untar the file to access the contents (a number of files equal to the number of your RADIUS servers): Windows Method 1 *