Some wireless users on Windows 7 intermittently cannot connect to wireless. WLC error #DOT1X-3-INVALID_WPA_KEY_MSG_STATE:

Hello EE,

I see several errors in my WLC #DOT1X-3-INVALID_WPA_KEY_MSG_STATE: 1x_eapkey.c:848 Received invalid EAPOL-key M2 msg in START  state - invalid secure bit; KeyLen 40, Key type 1, client <MAC>

It appears some users can't get on wireless, but reloading drivers often resolves or reinstalling VPN.  Cisco reviewed and gave me this, but wondering if any others are having it or know of why it happens when other SSIDs do work would think it's WLC configuration but client seems to be the issue

Error Message    %DOT1X-3-INVALID_WPA_KEY_MSG_STATE: Received invalid [chars] msg in[chars] state - [chars]; len [int], key type [int], client[hex]:[hex]:[hex]:[hex]:[hex]:[hex]
 
Explanation    Client authentication failed because of an authentication protocol error between the client and access point.
 
Recommended Action    If the problem persists, try upgrading the client driver software or using different client software to isolate the cause. Also investigate possible intruder activity.
 
Reference Link: http://www.cisco.com/c/en/us/td/docs/wireless/controller/message/guide/controller_smg/msgs4.html