AS2 Sender configuration - Authentication Certificate

Hello guys,
We're implementing EDI with a partner with AS2. We have AS2 sender adapter configured. Everything works fine (we're able to receive data from partner and send back MDN) without signing.
Now we're working on getting data signed. We have uploaded partner cert to keystore (TrustedCAs) and have provided partner with our certificate as well.
On Sender agreement--> Security Settings --> AS2 Sender Configuration --> Authentication Certificate how do we specify the certificate we're using. Should it be just the fullname like TrustedCAs/PartnerCert ?
Also How should we specify the Decryption Key and Signing Key under AS2 Receiver Configuration?
I was expecting to be able to choose from available keystores, but it is a free text field.
Can anybody please help me on this?
Thanks
Karthik

Hi Karthik,
>>On Sender agreement--> Security Settings --> AS2 Sender Configuration --> Authentication Certificate how do we specify the certificate we're using. Should it be just the fullname like TrustedCAs/PartnerCert ?
You need to mention the fullname as TrstedCAs/PartnerCert.
>>Also How should we specify the Decryption Key and Signing Key under AS2 Receiver Configuration?
Yes you need to since you are using signed messages here..
Regards
Suraj

Similar Messages

AS2 Adapter Configuration to Customer / no signature certificate

Dear all,
we start a project with an external Customer incl. Certificates.
If we now start message processing we get follow error back:
Message processing goes fail. Reason: javax.resource.ResourceException: Fatal exception: javax.resource.ResourceException: SEEBURGER AS2: AS2 Adapter failure # java.lang.Exception: AS2 message composition failed: com.seeburger.ediint.edi.EDIMessageException: EDI message composing failed: no signature certificate, SEEBURGER AS2: AS2 Adapter failure # java.lang.Exception: AS2 message composition failed:
com.seeburger.ediint.edi.EDIMessageException: EDI message composing failed: no signature certificate
Any idea ?
What is the meaning of "no signature certificate" ?
Because we import the certificate info the Trustcenter form the partner and customized in
AS2 Receiver Configuration -> Encryption Certificate
Thanks
Kind regards
S. Kohler

Hello,
The error states "EDI message composing failed: no signature certificate"
...and for the signature, you are always using your own key and not the certificate that you receive from the partner.
(since you wrote " ... we import the certificate info the Trustcenter form the partner")
So the error message is correct in the way that the referenced entry cannot be used to create the signature.
Greetings
Stefan

AS2: Where to specify certificates and keys: CC or Receiver Agreement

Hello,
when configuring a AS2 scenario (Proxy - AS2 Receiver) I am wondering about configuration details for certificates.
In the AS2 receiver configuration channel I can enter:
SSL Certificates
Server Certificate (Keystore)
Private Key for Client Authentification
In receiver agreement I can enter:
AS2 Sender Configuration
Signing Key
AS2 Receiver Configuration
EncryptionCertificate
So I am not sure what to configure where? I am right that transport level security is done in the communication channel, and message level security in the receiver agreement?
If I use SSL without client authentification in combination with Digital Signature I have to enter Server Certificate of parter in communication channel and Signing Key in Receiver Agreement, right?
Sorry, maybe this was a little bit confusing.

Hi,
you need to configure certificates in receiver agreement. I did it quite long back.. You need to enter some alias name of certificates over there.
Once you open the Receiver agreement, you can easily figure it out.
Thanks
Inder

Howto configure Seeburger AS2 Sender Adapter without using subject

Hello Experts,
we're going to implement AS2 Communication with a partner who isn't able to send the XML message with a subject in AS2 HTTTP headerfield but a different dtAS2FileName per message.
We have configured the scenario and it works as long as the partner only sends one message type (e.g. ORDER-XML). But of course there will be more than ORDERS and I don't know how to configure the scenario because I have to use only one Sender agreement with the same PARTNER-IDs (as mentioned in Seeburger AS2 Adapter Configuration Guide)
Can you please provide me the required configuration to deal with different Message-Interfaces from the same Partner.
We are an NW 7.0, Seeburger is on 1.8.1
Thanks in advance
Christian Sperlich

Christian Sperlich wrote:
Hi Suresh
>
> thanks for your answer. Exactly this scenario cames to our mind and was also suggested by another SAP Consultant. I'm sure this will work but (sorry!) this can't be the solution. Not only the additional configuration but also the monitoring of the EDI-Messages is more difficult if there were more than 1000 messages per day.
>
> Any other possibility / configurations?
>
> Kind regards
>
> Christian
Hi
You dont need to create another file channel to poll the files from a folder. This will be a additinal overhead to the system.
You can directly route the file on the fly based on dtAS2FileName to different receivers as well as interfaces.
You need to use condition in receiver/interface detyermination.
Your condition type shound be context object(not XPATH).
Then search for context object dtAS2FileName.

AS2 Sender Channel Dynamic Configuration

Hello All,
I have an AS2 to Proxy scenario.
For this I am using the following UDF and Modules in ESR and ID respectively :-
==========================================================================
UDF in ESR :-
public String AS2Name(Container container) throws StreamTransformationException{
DynamicConfiguration conf = (DynamicConfiguration)
container.getTransformationParameters().get(StreamTransformationConstants.DYNAMIC_CONFIGURATION);
DynamicConfigurationKey key = DynamicConfigurationKey.create("http://seeburger.com/xi/AS2","dtSubject");
String ourSourceFileName = conf.get(key);
return ourSourceFileName;
================================================================================
ID:
Module in AS2 Sender Channel :-
No.                Module Name                                                                  Type                                 Module Key
1     localejbs/AF_Modules/MessageTransformBean     Local Enterprise Bean     Plain2XML
2     localejbs/Seeburger/AttribMapper                          Local Enterprise Bean        AttribMapperEnterprise Bean
3     localejbs/CallSapAdapter                                                Local Enterprise Bean     exit
Module Key             Parameter Name                                            Parameter Value
AttribMapper          http://seeburger.com/xi/FileName                   @http://seeburger.com/xi/AS2/dtSubject
==============================================================================================
Could anyone please let me know asap if the above details will suffice the requirement?
Thanking you all in advance.
Neetish

Hi Aditya,
In the link its mentioned as
so, you can give any unique name. simple.
Hope this helps..
warm reg,
avinash M

AS2 adpater-- Configuration details for both SND and RCV.

Hi All,
I need some details for both AS2 sender and receiver adapter.
Sender AS2 adapter :
1. Use Proxy
      Use Authentication
Which one we need to use?
2. what is this Proxy Realm or Authentication Realm??
3. Whether we need to enable Hostname check & HTTP keep alive? what is the purpose of these settings?
4. what is this Message subject ?? the content of this comes from the file name or file data?
5. Server certificate and private key authentication?? do we need to get these from partner system??
Receiver AS2 adapter :
1. Here also the same question when we need to use Proxy settings and when we need to use Authentication settings.
2. Dynamic attributes??
     Use dynamic attributes
     Use non-empty attributes.
What are the information we need to ask partner system to get the connection??
Please reply if anyone worked on these AS2 settings.
Thank You.
Regards
Krupakar.

hi..
Sender Adapter..
1.You can use both use proxy and use authentication.depends upon the requirement.
when you use proxy you have to give proxy server name and all parameters.That means proxy server acts like your actual server.To pass this data through the AS2 apdapter U hv to specify th following parameters.
Proxy Server : Your proxy server.
Proxy Port :The port of the proxy server.
Proxy User: User for optional authentication.
Proxy Password: Password for optional authentication.
Proxy Realm: Realm for optional authentication.
2. REALM
A realm is a part of Yanel which has its own configuration and repository. This allows you to run several subsites (which are independent of one another) in a single Yanel instance. For example, each department in your company can have its own realm. This allows one department to use its database as a content repository and another to use the filesystem to provide the content to Yanel
So proxy realm means u r authorized to use the proxy server
You use Use Authentication for -
>Used to enable/disable basic authentication.
Use Authentication Used to enable/disable basic authentication.
User: User for basic authentication.
Password: Password for basic authentication.
Realm: Realm for basic authentication.
3. if u check these options for the following purpose.
SSL Hostname Check: Validate common name with server name.
HTTP Timeout:Timeout in seconds for waiting for server
response.
4.Message Subject: This subject will be compared with the subject in the received message. This is used to find the
correct channel for the inbound message. Wildcards are allowed.Its the file data.
5. Your partne rwill provide u these details.
Receiver Adapter:
1.If u use the same in sender side then u hv to verify it again in the receiver system. Then only the communication is established.
3.u must have the AS2ID and the certificates.
THAnks
MAnas
reward points if helpful.

Seeburger AS2 sender comm channel config

Hello,
I have to put in place a scenario for message reicipt of EDI messages via Internet using AS2 on http.
We use the seeburger AS2 adapter.
I try to configure the AS2 sender adapter, but there are many options, which I do not know how to fill, and which aint documented either.
I use the following config:
Tranport Protocol: http
Message Protocol:AS2
Adapter Engine: Integration Server
AS2 Authentification neccessary: When do I have to set this?
Message Title: *
Asynchronous MDN configuration
SSL certificate alias: where do I get this from?
SSL client certificate: what do I put in here?
use proxy: Do I specify the data of our SAP Web dispatcher here?
Thanks
Matthias

HI,
See the below links
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/135b0b94-0701-0010-f6a9-86a14057544a
/people/bla.suranyi/blog/2006/06/08/sap-xi-supports-edifact
/people/william.li/blog/2006/03/17/how-to-get-started-using-conversion-agent-from-itemfield
/people/paul.medaille/blog/2005/11/17/more-on-the-sap-conversion-agent-by-itemfield
http://www.stylusstudio.com/edi/XML_to_X12.html
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/b0b355ae-0501-0010-3b83-8f2bb566fa47
Details on XI EDI adapter from seeburger
Check this for Conversions-
/people/bla.suranyi/blog/2006/06/08/sap-xi-supports-edifact
http://www.seeburger.it/fileadmin/it/pdf/2005_04_sapphire_Ferrero_transcript.pdf
http://www.seeburger.com/fileadmin/com/pdf/Butler_Group_SEEBURGER_Technology_Audit.pdf
http://www.seeburger.com/fileadmin/com/pdf/AS2_General_Overview.pdf
SAP Adapters
EDI with XI
http://www.seeburger.com
http://www.seeburger.com/fileadmin/com/pdf/SEEBURGER_SAP_Adapter_engl.pdf
http://www.sap.com/france/company/events/2006/02-01-Automotive-Seeburger.pdf
http://h41123.www4.hp.com/presentations/ISUG/XISeeBurger.ppt
http://www.sap.com/asia/company/events/nwtechdays/presentation/australia-slides/Pre-Built_Integration.pdf
seeburger adapter configuration
Regards
Chilla

AS2 after change of certificate no inbound communication

Dear all,
the AS2 certifcate nearly ended, so we installed a new one. We send the public certificate to our customer. He installed the certificate, but the inbound communication is not working yet. The outbound communication is working.
The error messages from AS2 are:
Error in unkown channel: Alert triggered. 403 - com.seeburger.as2.exception.AS2PluginException: Failed to get inbound configuration from DATABASE. [7/27/10 8:55 AM]
Error in unkown channel: (No session available) >> Error type: COMMUNICATION_ERROR >> Error date: 7/27/10 8:55 AM >> Description: 403 - com.seeburger.as2.exception.AS2PluginException: Failed to get inbound configuration from DATABASE. [7/27/10 8:55 AM]
Error in unkown channel: (No session available) >> Error type: LOGICAL_ERROR >> Error date: 7/27/10 8:55 AM >> Description: Inbound communication from 5010793000014 to 4046423000001 not allowed: com.seeburger.as2.exception.AS2PluginException: Failed to get inbound configuration from DATABASE. [7/27/10 8:55 AM]
Can you help me on this issue. It is the first time we changed the certificate. The communication was working well with the old certificate. Is anything on our side missing?
Thanks and best regards
Frank

Hi Ravi,
This is really a useful information.
We have received a certificate file from our partner as you have mentioned.
I am in contact with BASIS colleague and trying if he could do it.
I would update the thread once it is resolved.
Thanks.
Best Regards,
Shweta

AS2 Sender Adapter -- Need few details.

Hi Seeburger Experts,
Im new to seeburger and i just to know regarding AS2 adapter.
Im a bit clear about the AS2 receiver adapter there we have an option of giving partner Server,URL and Port to send the messages from XI.
In the same way, I couldn't find the fields for AS2 Sender adapter to provide Server,Port and URL.
So im just wondering how we will be receiving the messages from Partner system thorugh AS2 adapter.?
as we are not providing any information like URl,port,path or Directory.. etc
Can anyone pls share ur answers.
Thanks&Regards
Deepthi.
Edited by: deepthi reddy on Dec 24, 2007 5:35 AM

HI Deepthi,
We need to give the AS2ID in the party identifier tab,AS2ID that is entered here will be used for identifying the sender and receiver of the document.
1)The value of the Agency field must be Seeburger.
2)The value of the Schema field must be AS2ID.
Every partner is assigned the WAN no which is provided by the WAN service provider. That WAn no we need to configure in the party identifier tab.
I hope It is clear to u now.
Thnx
Chirag.

AS2 sender communication channel

Hi All,
I have one As2 to proxy scenario, using AS2 sender adapter,PI will be receiving flat file from party and I am performing content conversion in sender As2 channel, there is no mapping involved, and PI is sending this data to SAP system via proxy using integrated configuration.
I have used 2 parties, one sender and one receiver, used 2 business components corresponding to each and one SAP system BC.I have mentioned AS2 ids in both the parties, and did the header mapping for receiver in integrated configuration ->Outbound processing tab.
Now when the file is pushed from AS2 server, there is no log in sender channel monitoring, means the file is not getting picked up from the AS2 server at all.
Can anyone please provide inputs how can we debug this problem.
Thanks,
Ruchi

Hi,
If you are using Seeburger AS2 adapter, then:
1. Check if the URL http://XXXXX:50000/SeeburgerAS2/AS2Server is up. It should show-"405 Method Not Allowed "
2. Check for AS2 messages in Seeburger workbench message-MessageIdStore Monitor
Thanks
Rajeev Gupta

Sender configuration incomplete - perhaps AS2ID missing...

Hello,
We have an PI 7.11 system. Our scenario is outbound IDOC to AS2 (converted to EDIFACT). It is from R/3 --> PI --> Third Party. We installed SeeBurger adapters.
R/3 is in our landscape, its component created without Party.
Receiver is a Third Party. So its component created with Party. In party we have defined Agency and Scheme Name as "Seeburger", "AS2ID", "XXX".
We also have done Receiver Agreement Header Mapping only for Receiver Communication Party and Receiver Communication Component.
When we try to send a message, getting below error at audit log.
Our Sender system is R/3, therefore we cant define a Party for it. What should be resolve this issue?
2012-03-08 15:37:49 Information Message successfully put into the queue.
2012-03-08 15:37:49 Information The message was successfully retrieved from the receive queue.
2012-03-08 15:37:49 Information The message status was set to DLNG.
2012-03-08 15:37:49 Information Delivering to channel: Receiver_Channel_AS2
2012-03-08 15:37:49 Information Message entered AF MP exit bean and will be passed to the JCA adapter now.
2012-03-08 15:37:49 Information SEEBURGER/AS2: Received order from system.
2012-03-08 15:37:49 Information Acknowledgement creation triggered for type: AckNotSupported
2012-03-08 15:37:49 Error Message could not be forwarded to the JCA adapter. Reason: Fatal exception: javax.resource.ResourceException: SEEBURGER AS2: AS2 Adapter failure # Outbound configuration error: Failed to get configuration from DATABASE. Sender configuration incomplete - perhaps AS2ID missing.., SEEBURGER AS2: AS2 Adapter failure # Outbound configuration error: Failed to get configuration from DATABASE. Sender configuration incomplete - perhaps AS2ID missing..
2012-03-08 15:37:49 Error Adapter Framework caught exception: Fatal exception: javax.resource.ResourceException: SEEBURGER AS2: AS2 Adapter failure # Outbound configuration error: Failed to get configuration from DATABASE. Sender configuration incomplete - perhaps AS2ID missing.., SEEBURGER AS2: AS2 Adapter failure # Outbound configuration error: Failed to get configuration from DATABASE. Sender configuration incomplete - perhaps AS2ID missing..
2012-03-08 15:37:49 Error Delivering the message to the application using connection AS2_http://seeburger.com/xi failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: javax.resource.ResourceException: Fatal exception: javax.resource.ResourceException: SEEBURGER AS2: AS2 Adapter failure # Outbound configuration error: Failed to get configuration from DATABASE. Sender configuration incomplete - perhaps AS2ID missing.., SEEBURGER AS2: AS2 Adapter failure # Outbound configuration error: Failed to get configuration from DATABASE. Sender configuration incomplete - perhaps AS2ID missing...
2012-03-08 15:37:49 Information The message status was set to WAIT.

Hello,
Did you solve the problem? What was the solution?
I have the same issue.
I have one AS2 scenario with this error and 20 other scenarios working fine.
full cache refresh is done, but did not solve the problem.

AS2 Sender Adapter -- Need clarity.. Very Very Urgent...!!!

Hi AS2 experts,
Regarding AS2 sender adapter:
We will provide the details
TP: HTTP
MP: AS2
*Message Subject = **
1. Can anyone please clarify what is this message subject ??
Its the incoming file name we need to provide?
According to few blogs,
2. We will be providing the below URl to the partner system to send there messages.
HTTP://<your-xi-server>:50000/SeeburgerAS2/AS2Server
Consider im having partner systems A,B,C .
and we will be creating 3 communication channels(CC1 ,CC2 ,CC3) to three partner systems.
If i provide same URL to all the three partner systems.
Then how it will differentiate like which file is belongs to which interface (from which partner it is coming)?
And im not providing anything specific in all the AS2 sender comunication channels to differentiate these files.
What is this AS2ID which we will provide in Party Configuration.
WIll it makes any difference to above problem?
Kindly suggest me if anyone has idea about this asap.
Its Very very urgent.
ThankYou.
Regards
Deepthi.

Hi,
>>>>1. We need to provide the below URl and Port to the partner to receive the messages?? HTTP://<your-xi-server>:50000/SeeburgerAS2/AS2Server
I guess yes . you need to provide this URI.
>>>>>2.Is it possible to do content based routing by using Message Subject?
yes it is possible to determine the receiver depending upon ur condition. Please provide the context object at design time and at the time of Configuration , using XPATH you can determine conditional receiver.
please look in to this links u will come to know about seeburger adapter.
/people/bla.suranyi/blog/2006/06/08/sap-xi-supports-edifact
/people/william.li/blog/2006/03/17/how-to-get-started-using-conversion-agent-from-itemfield
/people/paul.medaille/blog/2005/11/17/more-on-the-sap-conversion-agent-by-itemfield
http://www.stylusstudio.com/edi/XML_to_X12.html
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/b0b355ae-0501-0010-3b83-8f2bb566fa47
Details on XI EDI adapter from seeburger
/people/bla.suranyi/blog/2006/06/08/sap-xi-supports-edifact
http://www.seeburger.it/fileadmin/it/pdf/2005_04_sapphire_Ferrero_transcript.pdf
http://www.seeburger.com/fileadmin/com/pdf/Butler_Group_SEEBURGER_Technology_Audit.pdf
http://www.seeburger.com/fileadmin/com/pdf/AS2_General_Overview.pdf
SAP Adapters
EDI with XI
http://www.seeburger.com
http://www.seeburger.com/fileadmin/com/pdf/AS2_General_Overview.pdf
http://www.seeburger.it/fileadmin/it/pdf/2005_04_sapphire_Ferrero_transcript.pdf
http://www.seeburger.com/fileadmin/com/pdf/SEEBURGER_SAP_Adapter_engl.pdf
http://www.seeburger.com/fileadmin/com/pdf/Butler_Group_SEEBURGER_Technology_Audit.pdf
http://www.sap.com/france/company/events/2006/02-01-Automotive-Seeburger.pdf
http://h41123.www4.hp.com/presentations/ISUG/XISeeBurger.ppt
http://www.sap.com/asia/company/events/nwtechdays/presentation/australia-slides/Pre-Built_Integration.pdf
http://www.seeburger.com
http://www.seeburger.it/fileadmin/it/pdf/2005_04_sapphire_Ferrero_transcript.pdf
http://www.seeburger.com/fileadmin/com/pdf/Butler_Group_SEEBURGER_Technology_Audit.pdf
http://www.sap.com/france/company/events/2006/02-01-Automotive-Seeburger.pdf
http://h41123.www4.hp.com/presentations/ISUG/XISeeBurger.ppt
Hope this will help you.
Regards
Aashish Sinha
PS : reward points if helpful

AS2 Sender adapter.. How we can receive 2 messages from same partner??

Hi all,
I have to receive 2 AS2 messages from my partner like ORDERS and REMADV information.
I kept Message Subject as * for both my AS2 Sender adapters.
I configured both the scenarios and i ask my partner to send the messages and he got the error as
"403 : FORBIDDEN" .
But these two scenarios are working when i delete one scenario and run the other by keeping message subject as *
I felt like the messages can be diffferentiated only with Message subject when we are dealing with AS2 adapters.
Questions :
Is there any option in AS2 sender adapter where we can differentiate the messages apart from Message subject because my partners are sending the messages without any message subject.
Kindly let me know.. its urgent.
Regards
Seema.

Hi Swarup,
Thanks for the reply.
I think you totally misunderstood my question.
Here i will explain clearly..
Sender Party : PartyA
Sender AS2ID : A-AS2
Recevier party: PartyB
Receiver AS2ID : B-AS2
PartyB will be receiving messages from PartyA.
Say it is receving ORDERS and REMADV messages.Both are XML files.
So PartyB will be configured with two complete new scenarios and 2 AS2 sender adapters to receive the messages.I kept Message subject as * in both the sender adapters.
The messages are not coming in and clearly there is a confilct in selecting the correct communication channel.
Actually i read in one of the thread that the messages which are coming to XI will be picked up based on two things:
1) AS2 ID of the partner which is dicussed above and the second one is
2) Message subject
But from my partners we are receving the messages without any Message subject.
So in this situation how we can differentiate each messages and how the messages will go to correct communication channel.??
Regards
Seema.

Seeburger AS2 Sender : EOIO

Hi All,
Is it possible to achieve EOIO with Seeburger AS2 sender channel? I am not seeing any parameter for configuring the same (though it has EOIO mode for split mapping).
The idea is to send all the messages received for a particular interface to be routed to a EOIO queue. Is this possible with AS2 sender channel?
Regards
Suraj

Hi Prateek,
>>SAP_AS2Adapter_en.pdf - Page 6 (in my version).
I have checked seeburger manuals and found page six to be something different (may be different version document). From the document I found a particular section
The following Qualities of Services are supported:
u2022 Outbound (AS2 sends a message to an external partner)
Best Effort
Exactly Once
Exactly Once in Order
u2022 Inbound (AS2 adapter receives a message from external partner)
Exactly Once
This was in Section 2.5 under Overview. May be if you tell me the section I would try to read through it,
I have tried your suggestion
namespace: http://seeburger.com/xi/AS2
parameter name "QoS" value "EOIO" and
for name "QueueName" value "<your actual queue name>"
but it didn't help. If I use with "write", there was no entry in MONI, and if I use it with "insert" the entries were created but it didn't go to the EOIO queue (as the SAP:QualityOfService is still ExactlyOnce in SoapHeader->ReliableMessaging)
<SAP:Record namespace="http://seeburger.com/xi/AS2" name="QoS">EOIO</SAP:Record>
<SAP:Record namespace="http://seeburger.com/xi/AS2" name="QueueName">INT014</SAP:Record>
Anyway thanks for your inputs
Regards
Suraj

Alternatives to MS workstation authentication certificates for 802.1x?

I found out recently the hard way that the Certificate Authority bundled with Windows Server 2008 won't load the 'workstation authentication' certificate template. (You need 2008 Enterprise/Datacentre or 2008 R2, or any edition of 2008 R2).
Does anyone know of alternative ways of authenticating a device using 802.1x?
thanks,
David.

Hi Kirbus,
we open a TAC and we were advised for now to do the following changes:
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman","serif";}
1.       please make sure to disable Aironet extensions (if present) , on the WLAN advanced configuration
2.       disable management frame protection (MFP) signature generation (if present) , MFP also on the WLAN advanced configuration
3.       on the WLC general configuration , can you please disable aggressive load balancing
4.       on the security tab on the WLC , please wireless protection policies > disable client exclusion policies
5.       on the AP network configuration please disable short preamble the original standard was long preambles
6.       Wireless -> disable auto-RRM channel & power assignment & try "on demand"
7.       apply these modification on the WLC CLI
Config advanced eap identity-request-timeout 20
Config advanced eap identity-request-retries 10
Config advanced eap request-timeout 20
Config advanced eap request-retries 10
Save config, and see if you still face the problem.
We are still monitoring the solution, but until now we didn't face the problem again.
Let me now how it goes for you.
Thank you.
Best regards,

AS2 Sender configuration - Authentication Certificate

Similar Messages

Maybe you are looking for