Users connecting a device to the eduroam Wi-Fi network for the first time often have to accept the certificate that is used for authentication. Existing wireless users may be prompted to accept a new certificate once a year when it is updated in the central systems.
This process is normal with an enterprise wireless network such as eduroam. A certificate is required to encrypt authentication but because it's not done through a web site a device may want the user to accept it instead of just allowing by default.
The certificate prompt may look like one of these:
macOS
Android
iOS (iPhone, iPad)