I'm an Xfinity Mobile customer. I own an Android phone I bought from Xfinity Mobile. I would like to connect to a secure XFINITY hotspot.
I've read that the way to connect an Android device to the secure hotspot is to download the Xfinity Hotspots App from the Google Play Store, log in, and select the hotspot I want to connect to.
I downloaded the app, but when I ran it, I was not given the opportunity to log in. Instead, I was presented with a map showing the locations of the hotspots in my area.
When attempting to connect to the XFINITY secure hotspot, I see that my phone is supposed to have a CA Certificate to show to the hotspot. My phone apparently has not been sent a certificate or profile. I know I can just not show a certificate, but then the connection is not secure.
I've seen this problem described several times in the Xfinity forum, but I have yet to see a solution posted. Is there, in fact, a known solution to this problem?
Solved! Go to Solution.
I understand. If you haven't already you can go to this Xfinity Mobile Support site https://www.xfinity.com/mobile/support/article/xfinity-mobile-wifi-hotspots or call/text Support at 1 (888) 936-4968.
Here's my theory, and why I posted this message in the Xfinity Mobile forum. I think that the Xfinity Hotspots App doesn't let me log in because I'm an Xfinity Mobile subscriber. I think maybe the app already knows who I am because I have an Xfinity Mobile phone. In bypassing the log in page, I'm guessing it also bypasses downloading the certificate I need to access the secure XFINITY hotspots.
So a good question to ask would be whether Xfinity Mobile subscribers with Android phones are able to log into the app or are able to connect to XFINITY hotspots securely.
Several months ago I was having trouble connecting to the XFINITY hotspots. I stopped in an Xfinity store for help. All I had to do was enter my password after selecting the network in my settings. The password will remain unless you choose forget. The Hotspots app isn't needed.
Edited to add that I also had to add my username in the space for Identity. Also replaced the picture to show this correction.
I've changed my mind again. I think you need the certificate to be secure. Take a look at the following article, which describes how a man in the middle attack can take place if there's no certificate.