EAP-TLS wi-fi net for PC and iPhone

Hi, everyone! I'm rather confused and hoped that someone could help me to make the situation clear.
We wan't to establish a wi-fi net with WPA-2 Enterprise and EAP-TLS for computers and mobile devices (iPhones, Nokia Symbian, Android devices).
The connection is organised in such way: client---AP 1240---ACS 4.2---AD(server 2003)
I have 2 testing computers with wi-fi adapters: one is connected to the domain (has a wire connection), another has a local account, and an iPhone. I customized the settings on these computers,iphone, AP and ACS.
We have our own CA, 2-tier PKI infrastructure. I have installed the ACS and client's certificates on all the devices (by the way, they are 2048 bit size of).
I manage to connect from a computer included in the domain but the second PC and iPhone refuse to connect,respectively:
"EAP-TLS or PEAP authentication failed during SSL handshake".
"EAP-TLS or PEAP authentication failed due to unknown CA certificate during SSL handshake"
Also I saw in logs that "Machine authentication is not permitted" so the domain PC authenticates through user account and is mapped to a special group.
So I think the reason is that only domain devices are allowed to join the net. How can I change this thing?
Another variant is that I issue the certificates first to wired domain computers and then export them to non-connected to domain devices so they have inappropriate credentials.
Please, if you have any thoughts about the reason of the problem, share them. I would appreciate any help.

The ATV is strictly a wifi client, it doesn't function as a router or access point. You can connect it to your router either by wifi or Ethernet cable. Your pc doesn't need a wifi card to work with an ATV as long as they're both on the same network.

Similar Messages

Hi. Dear users. What about Web Browsers for Mac and IPhone 4S devices

Hi. Dear users. What about Web Browsers for Mac and IPhone 4S devices?
Test Labs: THG and something else.
Thanks for responses and future responses.
Big Thanks.

"What about?" Both come with Safari as a Web Browser.
Can you be a little more specific as to the information you are requesting?

Can I create books for the iBookstore for iPad and iPhone using Pages?

Can I create books for the iBookstore for iPad and iPhone using Pages?

No problem, Peter. iBooks Author makes a lot of things much easier than trying to grapple with a standard epub, but it also has some big limitations, like iPad only, and ibookstore only.
EDIT It's not really suitable for something like a novel, for example, although it's great when you need lots of illustrations and movies and such.

When is Apple will make a Micro USB Flash Drive for iPads and iPhones ???

IIt's really a big help if Apple make their own Micro USB a Flash Drive for iPads and iPhones.

Apple would not tell people there are other brands on the market. It is my opinion that if Apple users keep asking for the USB for ipads, they might consider it. As for the iphone there MIGHT be a tiny slot inside where the battery is for an SD card, which expands the space. I know Android has that feature in their cell phones, but not sure about Apple.

HT1349 I purchased pages and numbers for Ipad and Iphone, now I have a MacBook Air and I would like to use both softwares in my computer. Do I need to purchase them again ?

I purchased pages and numbers for Ipad and Iphone, now I have a MacBook Air and I would like to use both softwares in my computer. Do I need to purchase them again ?

Yes. Air runs OS X, iPad and iPhone run iOS - different operating systems
that required different versions of Pages, Numbers, & Keynote to run. Like
the iOS version, once you purchase the version for your Air, you may install
it on as many OS X desktops/laptops that you own.

HT201210 Keep getting error 9006 when updating iOS system for iPOD and iPHONE and not sure what to do, any solutions

Keep getting error 9006 when updating iOS system for iPOD and iPHONE and not sure what to do, any solutions?

Errors related to third-party security software
Error 2, 4 (or -4), 6, 1000, and 9006
Follow the steps to troubleshoot security software. Often, uninstalling third-party security software will resolve these errors.
There may be third-party software that modifies your default packet size in Windows by inserting a TcpWindowSize entry into your registry. An incorrectly set default packet size can cause these errors. Contact the manufacturer of the software that installed the packet size modification for assistance or follow this article by Microsoft: How to reset Internet Protocol (TCP/IP).
Verify that access to ports 80 and 443 are allowed on your network.
Verify that communication to albert.apple.com or phobos.apple.com isn't blocked by a firewall or other Internet security setting.
Discard the .ipsw file, open iTunes and attempt to download the update again. See the steps under "Advanced steps > Rename, move, or delete the iOS software file (.ipsw)" below for file locations.
Restore your device while connected to a different network.
Restore using a different computer.
Errors related to downgrading iOS

Adobe Revel for ipad and iphone won't update

Adobe Revel for ipad and iphone won't uodate. It downloads about 3/4 of the update and then stops. I have tried it many times.

Hi countrylifejohn,
Please refer to the post below for updates on the revel installation issue:
Adobe Revel 2.3.2 installation issue
Latest Revel IOS update crashes and won't install
Regards,
Rave

Is there a security fix coming as there was for iPad and iPhone ?

is there a security fix coming as there was for iPad and iPhone ?

mykee59,
security updates were also made available for Mountain Lion and Lion. Snow Leopard is apparently no longer supported.

Palm Desktop replacement for Mac and iPhone?

Since Palm Desktop is no longer in active development, is there a Palm Desktop replacement for Mac and iPhone?
http://kb.palm.com/wps/portal/kb/common/article/33219_en.html#mac
I mean, a single application (not a bunch of them like Address Book, iCal etc) that works on Mac (desktop) and that can sync with the iPhone. Including all data from the current Palm Desktop:
1. Address List
2. To Do List
3. Memo List
4. Date Book
Thanks.

If only Apple did something like that (all-in-one-application personal organizer with contacts, memos, calendar, to do lists, etc)
Well, they offer all those functions--Mail has Notes and To-dos show up in both Mail and iCal, plus Address Book. Clearly someone made the fundamental decision that separate integrated programs were better than an all-in-one, so I wouldn't expect an all-in-one from Apple in any foreseeable future. But you can send a feature request, if you like:
http://apple.com/feedback
What would be interesting---and may exist, I haven't looked---would be if a third-party used the open access to iCal/Address Book info to build an all-in-one that integrated with Apple's separate apps, which could provide seamless iPhone/OS X integration while still letting people have the unified interface. Postbox uses Address Book but I didn't see any calendar/notes features in my quick check. Lots of apps build better replacements for Apple's individual programs--BusyCal, I think a Mail replacement, etc---but nothing unified that I've heard of.
However, my point was that you may be better off grabbing Entourage 2008 while it is still available than waiting for Outlook 2011, which is going to be a different program. Sometimes features go backwards, and Missing Sync compatibility may change or be delayed with Outlook 2011. I don't see the advantage of hanging onto PD until the very last minute.
ETA re the tech guarantee:
http://www.microsoft.com/mac/products/Office2008/office-2011-upgrade.mspx
Message was edited by: Daiya

EAP-TLS with ISE 1.1.2 and WLC 7.0.228

Hi,
I'm on process of implement Cisco ISE with Wireless LAN Controller. According to my post, I would like to know that if Supplicant Provisioning and EAP-TLS does support on this type of firmware code.
WLC running on 7.0.228 since most of production APs are 1230
ISE running on the latest version.
I have to use EAP-TLS and Supplicant Provisioning on these platforms.
Is this possible to do about this ?
Thanks,
Pongsatorn Maneesud

Please check the below compatibility matrix link for Cisco ISE along with a link for client provisioning which might be helpful:
http://www.cisco.com/en/US/docs/security/ise/1.1.1/compatibility/ise_sdt.html
http://www.cisco.com/en/US/solutions/collateral/ns340/ns414/ns742/ns744/docs/howto_61_byod_provisioning.pdf
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_client_prov.html

EAP-TLS with WLC 5508, Microsoft NPS and custom EKU OID´s

We are trying to implement EAP-TLS with client certificates that have a custom EKU OID to distinguish the WLAN clients. The Microsoft Press Book
Windows Server 2008 PKI and Certificate Security gives an example on how to configure a policy in NPS that matches specific EKU OID´s. At the moment we have two policies that have an allowed-certificate-oid configured that matches the OID´s in our certificates, but our setup is not working as expected. Authentications will only be successful, if the client authenticates with the certificate that is matched by the first policy rule.
For example:
Policy 1: allowed-certificate-OID --> corporate
Policy 2: allowed-certificate-OID --> private
Client authenticates with EKU corporate --> success
Client authenticates with EKU private --> reject
My expectation was, that if Policy 1 will not match the NPS goes over to Policy 2 and tries to authenticate the client.
Has anyone a simmilar setup or can help to figure out what is going wrong?
We have a WLC 5508 with Software Version 7.4.100.0 and a NPS on a Windows Server 2008 R2
regards
Fabian

The policy rejects and the NPS goes to the next policy, only if the user does not belong to the configured group.
This means I need to have one AD group per application policy, but that will not solve my problem. A user could belong to more than one group, depending on how many devices he/she has. It will work with one group only for each user, because the first policy that matches a AD group, the user belongs to, could have a OID that is not in the certificate. This would cause a recejct with reason code 73:
The purposes that are configured in the Application Policies extensions, also called Enhanced Key Usage (EKU) extensions, section of the user or computer certificate are not valid or are missing. The user or computer certificate must be configured with the Client Authentication purpose in Application Policies extensions. The object identifier for Client Authentication is 1.3.6.1.5.5.7.3.2.
The certificate does include this OID but not the custom EKU.

EAP-TLS on ACS v4 for wireless users

Hi,
I?m trying to deploy EAP-TLS authentication method on ACS v4.0 for my local wireless users; really I stuck with the certificate issue and need your assistance to understand the required procedures to accomplish the task.
As mentioned on the ACS configuration guide I have to have CA server to generate certificates for both ACS and wireless users, but I found an option on the ACS under System configuration tab then ACS Certificate Setup a Generate Self-Signed Certificate, I generated a certificate and uploaded a copy to my PC, installed and followed the recommended steps to configure the Microsoft XP client configuration but still I got the error ?Windows was unable to find a certificate to log you on to the network SSID? . Honestly I don?t know if this is possible but I gave it a try but failed.
Kindly advice what is the appropriate and easiest way to accomplish the task, if you could provide me with helpful documents I?ll appreciate it.
Regards,
Belal

I am currently using EAP-TLS authentication on my wireless users using ACS 3.2. I have had that problem before. This is what I did...
Setup a Microsoft Certificate server as my
CA. You can use same machine wih your ACS and CA.
Then, generate certificate signing request from ACS then request a server certificate from CA then copy and install a certificate to ACS. On the ACS, go to global authentication setup check the EAP-TLS cetificate. If it failed to respond means that the server certificate is not properly setup.
On the windows xp clients, connect your machine using wired LAN, then request a certificate from CA(the same CA that you have use to your ACS) using IE (ex. http://CAip/certsrv), but this time request a client certificate. The name you should put when requesting the cert must be you local windows user, use 1024, choose microsoft base cryptographic provider 1.0. then installl the certificate on the client. Verify you client certificate it i was installed properly.
At that poit you should be able to connect you r wireless client using EAP-TLS.

Net access for wii and iPhone via iMac - help!

If I've got it right my fairly new imac flat panel has a built-in Airport networking card that actually allows me to connect my wii and iphone to the internet without a separate router. I actually managed to set up the network with the wii but later lost the connection. I just got an iphone so I've been trying to get the wifi access going going again using the standard mac os utilities but I just can't figure it out and I can't find any useful guidance. Suggestions? Thanks.
Message was edited by: slackeresq

Hello and Welcome to Apple Discussions.
Thanks for posting back.
Does the Wii only need Port 80 to be open on the Firewall or does it use other ports also?
Thanks
mrtotes

How do you use one apple id for iPad and iphone

We have an iPad, four iphone 3gs and a new iphone4. We use one apple Id for each with iCloud. Do we need a new apple Id for the 4gs? Also how do we share the iPad between the iPhones for music & apps. Thanks.

To allow you to Message one another and FaceTimne one another see:
MacMost Now 653: Setting Up Multiple iOS Devices For Messages and FaceTime

Jabber for Windows and Iphone

We are running Jabber on cucm 9.1 WE use microsoft RDS and all works fine locally. users can sign in with their AD account and see their presence, use their deskphone and receive email. that works on both the windows and Iphone clients.
When they are logging in via a anyconnect VPN however. the im and presence shows no status for anyone, even though they are logged in but the phone and vociemail is fine, calls can be made and received. The ASA is not blocking anything so not sure where to start with this one

I just did a full deployment for jabber 4 windows iphone, ipad and android and to get my presence status working as well as photos shown and directory searches I had to make use of the BDI config in my jabber-config.xml file on the cucm as well as the UC services on the cucm and mine is working 100%.
That is all why I am asking.

EAP-TLS wi-fi net for PC and iPhone

Similar Messages

Maybe you are looking for