Alta Help Center

Implementing Passpoint using OpenRoaming

Mike Dudgeon
Mike Dudgeon
  • Updated

Setting up a test SSID for Passpoint (previously known as Hotspot 2.0) using OpenRoaming is a quick process that only takes a few minutes. The first thing you need to do is create your test SSID. You can do so under Settings > WiFi > Add New, whether from the web or on mobile.

WiFi Network Name: WBA OpenRoaming
WiFi Security: Enterprise
IP Address: 34.172.215.201
Secret: radsec

Configure Advanced Settings

Now, let’s proceed with enabling Passpoint on this SSID. The following focuses on setting advanced SSID options, including power-user settings tailored for the OpenRoaming test server. Other Passpoint providers will also require power-user settings, though the specific values or variables may differ. 

  1. Navigate to the `WBA OpenRoaming` SSID settings.
  2. Click on Advanced Settings.
  3. Select your desired Default Network Type. For a hotspot application, 'Internet' is typically recommended.
  4. Scroll down and enable Power-User.
  5. In the Power-User section, paste the following JSON snippet:
    {
    "hostapd": "
    hs20=1
    disable_dgaf=1
    hs20_oper_friendly_name=eng:JR1
    interworking=1
    access_network_type=3
    internet=1
    roaming_consortium=5A03BA0000
    radius_acct_interim_interval=300
    venue_name=eng:WBA
    "
    }
  6. Click Save to apply the changes.

If your provider requires additional parameters not currently listed, you can reference the hostapd configuration documentation HERE. You would add parameters in the same format as the other parameters, between the opening and closing quotes. 

Download the OpenRoaming Profile

To test the configuration, you'll need to create WiFi profiles that can roam to the RADIUS server provided by ConnectionAssist. This involves downloading and installing the profile on your device(s):

  1. Visit ConnectionAssist OpenRoaming Server from the device(s) you plan to test or, if capable, scan the QR code below:
  2. Accept the agreement and choose `Download and install profile`.
  3. Follow the instructions based on your operating system:

Android 14 / Windows 11

  • Brave was used to download the profile, but you should be able to use your preferred browser on these OS.
  • The system will prompt you to automate the profile installation into Settings on each OS. Simply follow the prompts to complete the profile installation, which typically involves a couple of taps or clicks.
  • After the profile is added, navigate to the WiFi settings and connect to the `WBA OpenRoaming` SSID.

iOS/iPadOS

  • Use Safari to download the profile.
  • When prompted, allow the profile to be added to settings. Go to Settings > Profile Downloaded, select the profile, tap Install, enter your device password when prompted, and then tap Done to complete the installation.

macOS

  • Use Safari to download the profile.
  • The downloaded file will be named `_tmp_signed.ios.mobileconfig`. Open this file manually (as it will not automatically add to settings). Double-click the profile in Settings, choose Install, and enter your device password to proceed.

Authenticate with the WBA OpenRoaming Network

Once the profile is installed on your test device, you should be able to connect to the `WBA OpenRoaming` test SSID that you created. If you successfully connect then it means everything was provisioned correctly. If it prompts you for a username and password then it (likely) isn't using the correct profile. If it uses the correct profile it should just authenticate without needing to input credentials. 

Please note that the WBA Connection Assist service is part of a concept trial and is intended for testing environments only. It should not be used for production integration.

Related to

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request

Comments

0 comments

Article is closed for comments.