[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 133
  • Last Modified:

Radius authentication for Wireless via Corporate certificate

we have radius setup for our wireless, a corporate laptop gets a wireless certificate installed so when a user logs into their AD profile they can connect to our wireless SSID and access the network as if they are plugged in via ethernet cable

i have some Lenovo X1 Carbons that is not authenticating, it tries to connect to the Wireless SSID and asks for windows username and password and fails to connect

all other windows 10 and windows 8 laptops connect and i cannot figure out whats going on.

Please help
0
NxJNY
Asked:
NxJNY
2 Solutions
 
Craig BeckCommented:
Check the RADIUS logs. If youre using Windows NPS you can check the custom log (easier to read). Post them here if you can't work out what the logs mean.
0
 
NxJNYAuthor Commented:
not seeing much on the NPS logs.

A LDAP connection with domain controller NYSERVER1.domain.com for domain domain is established.
0
 
Jakob DigranesSenior ConsultantCommented:
it would seem that the Wireless Profile on X1s are set to PEAP-MsChapV2 - or - the certificates isn't working so it falls back to mschapv2.

Check following (and agree with CraigBeck - Event Viewer would be a good place to start ---- logs empty? sure you're looking at correct NPS server? )

- Do the X1 have a Personal Machine Certificate enrolled? if you open it - is it okay or any warnings with it?
- Do the X1s have the trusted root certificate installed?
- when looking at wireless profile - is it set to EAP-TLS or mschapv2? is the profile installed through GPO?
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now