Cisco Network Setup Assistant Unable to install the certificate on Android KitKat

Greetings,
I'm having issues with deploying the CA. Although the Cisco app fails, the user cert (but no CA) appears to install and is accessible during wifi setup. I am running the latest version of Cisco Network Setup Assistant 1.2.42. The phone is running Android KitKat 4.4.4, not rooted, running stock T-Mobile rom. I'm able to authenticate with the guest side, and get as far as Installing Certificates... Reference the screen shots attached.
Error message cisco Network Setup Assistant: "Unable to install the certificate. Exit the application and run it again to continue to the installation."
I have ran the application several times, it keeps returning to this same message.
After failure of the Cisco app, I noticed there is a certificate manager with CA cert and key, and than subsequently one new key continues to loop after until I cancel (also in screenshots).
I have tried decryption, removing all security, and clearing credentials, yet the problem persists. Any help is appreciated.

Similar Messages

ISE cannot push the profile to the cisco network setup assistant?

We have tried a few android devices with version 4.2+ but still got the error message ‘Unable to download profile.(Have you logged into the guest portal?)’ as shown at the bottom picture.
In fact, we are connecting the devices to an open SSID which performs MAC filtering, then redirect to CWA and login with AD credentials,
then redirect to Google play store and can successfully download the network setup assistant.
Could you please advise the possible reasons that would cause this error message and make ISE cannot push the profile to the cisco network setup assistant?

Here's a snipit from the Android spw.log. I see that there is an error trying to verify the hostname. Is it possible that this is caused by a non-trusted certificate? I'm using the self-signed cert built into ISE. I have an entry in the public DNS for guest.domain.com that resolves to the IP of my ISE server accessible from the guest subnet. I'm allowing all traffic from the guest VLAN to the ISE vlan on the firewall and all traffic to/from the ISE server in the provisioning ACL I have applied by ISE on the WLC during native supplicant provisioning. I know that guests can communicate with the ISE server since regular guest portal redirection works, just not the network setup assistant. I've renamed the domain to domain.com in this snipit.
2014.07.20 23:44:48 INFO:verion :4.4.4 SDK Level : 19
2014.07.20 23:44:48 INFO:State :START
2014.07.20 23:44:48 INFO:Starting Discovery
2014.07.20 23:44:48 INFO:Starting ISEDiscoveryAsynchTask
2014.07.20 23:44:48 INFO:DHCP Stringipaddr 192.168.30.110 gateway 192.168.30.1 netmask 255.255.255.0 dns1 208.67.222.222 dns2 208.67.220.220 DHCP server 192.168.30.1 lease 3600 seconds
2014.07.20 23:44:48 INFO:DHCP ipaddress192.168.30.110
2014.07.20 23:44:48 INFO:DHCP gateway192.168.30.1
2014.07.20 23:44:48 INFO:Discoverng ISE http return code :200
2014.07.20 23:44:48 INFO:ISEServer =guest.domain.com
2014.07.20 23:44:48 INFO:session =0516a8c000001932f37acc53
2014.07.20 23:44:48 INFO:Discovered using gateway :18786496
2014.07.20 23:44:48 INFO:Discovered ise server = guest.domain.com
2014.07.20 23:44:48 INFO:Discovered client mac = 5C-0A-5B-FC-37-0F
2014.07.20 23:44:48 INFO:Server:Key=guest.domain.com:0516a8c000001932f37acc53
2014.07.20 23:44:48 INFO:Downloading config fromguest.domain.com
2014.07.20 23:44:48 INFO:checkServerTrusted call
2014.07.20 23:44:48 INFO:checkServerTrusted call
2014.07.20 23:44:48 ERROR:DownloadprofileAsynchTask
2014.07.20 23:44:48 ERROR:java.io.IOException: Hostname 'guest.domain.com' was not verified
2014.07.20 23:44:48 ERROR:Hostname 'guest.domain.com' was not verified
2014.07.20 23:44:48 INFO:Internal system error.
On the ISE side, here is the snippet of logs during the same time as when the android network setup assistant was run.
2014-07-20 23:41:38,586 INFO [DefaultQuartzScheduler_Worker-6][] cisco.cpm.infrastructure.utils.NodeGroupFWUtil -:::::- Applied Firewall rules for node group.
2014-07-20 23:42:35,251 INFO [AbandonedTransactionReaper][] com.cisco.epm.db.AbandonedTransactionReaper -:::::- In AbandonedTransactionReaper : MaxActive : 20
0 CurrentActive : 0 MaxIdle : 200 MinIdle : 0 CurrentIdle : 2
2014-07-20 23:42:39,394 INFO [AbandonedTransactionReaper][] com.cisco.epm.db.AbandonedTransactionReaper -::::PDPInitialization:- In AbandonedTransactionReaper
: MaxActive : 200 CurrentActive : 0 MaxIdle : 200 MinIdle : 0 CurrentIdle : 0
2014-07-20 23:42:49,765 INFO [DataSourceListener Thread][] api.services.persistance.dao.DistributionDAO -:::::- In DAO getRepository method for HostConfig Type
: ACTIVE
2014-07-20 23:42:56,805 INFO [PDP-Heartbeats-0][] com.cisco.cpm.clustering.MnTClient -::::pdpha:- Removing session 0516a8c00000196f2a95cc53
2014-07-20 23:42:56,806 WARN [PDP-Heartbeats-0][] cpm.nsf.session.impl.SystemStateManager -::::pdpha:- Session 0516a8c00000196f2a95cc53 not found at complete
2014-07-20 23:43:35,441 INFO [portal-http-844314][] cisco.epm.license.flexlm.FlexlmFileHandler -:::::- Is License Valid for seId [1] = true
2014-07-20 23:43:35,441 INFO [portal-http-844314][] com.cisco.epm.license.LicensingManager -:::::- License is valid [true] for SeriveType [1]
2014-07-20 23:43:35,750 WARN [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- --- GuestPortalUtils: Una
ble to determine language. Defaulting to English
2014-07-20 23:43:35,768 WARN [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- --- GuestPortalUtils: Una
ble to determine language. Defaulting to English
2014-07-20 23:43:35,768 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- initializing page definit
ion
2014-07-20 23:43:35,769 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- Created guest theme page
def
2014-07-20 23:44:18,090 WARN [portal-http-844315][] cisco.cpm.guestportal.actions.SelfProvisioningAction -:test:0516a8c000001932f37acc53::guest:- ***BYOD Regi
stration Data***
macAddress: 5C:0A:5B:FC:37:0F
portalUser: test
authStoreName: Internal Users
authStoreGuid: 78954c30-e0f0-11e3-af67-005056bf4689
2014-07-20 23:44:18,113 INFO [portal-http-844315][] com.cisco.epm.jms.AQMessgeHandler -:test:0516a8c000001932f37acc53::guest:- Publishing message for event [T
xnCommit / commit] and message class[class com.cisco.epm.pap.api.transaction.Transaction]
2014-07-20 23:44:18,167 WARN [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- --- GuestPortalUtils
: Unable to determine language. Defaulting to English
2014-07-20 23:44:18,168 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- initializing page de
finition
2014-07-20 23:44:18,169 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.CoAExecutorService -:test:0516a8c000001932f37acc53::guest:- Issue CoA reauth i
n 2000 milliseconds for sessionName 0516a8c000001932f37acc53
2014-07-20 23:44:18,171 WARN [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- --- GuestPortalUtils
: Unable to determine language. Defaulting to English
2014-07-20 23:44:18,172 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- initializing page de
finition
2014-07-20 23:44:18,173 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- Created guest theme
page def
2014-07-20 23:44:20,171 INFO [pool-19-thread-4][] cisco.cpm.guestportal.utils.CoAReauthTask -:test:0516a8c000001932f37acc53::guest:- Running CoAReauthTask for
_sessionName 0516a8c000001932f37acc53
2014-07-20 23:44:20,194 INFO [pool-19-thread-4][] cisco.cpm.guestportal.utils.CoAReauthTask -:test:0516a8c000001932f37acc53::guest:- Issue Local CoA for sessi
on 0516a8c000001932f37acc53
2014-07-20 23:44:50,768 INFO [ContainerBackgroundProcessor[StandardEngine[Catalina]]][] cpm.admin.infra.action.SessionCounterListener -:::::- sessionDestroyed
- deducted one session from counter - Session ID - 0FFE9C73C9209D4EE2534558CB8F723B - Session Count - 0
2014-07-20 23:46:58,502 INFO [portal-http-844315][] cisco.epm.license.flexlm.FlexlmFileHandler -:::::- Is License Valid for seId [1] = true
2014-07-20 23:46:58,502 INFO [portal-http-844315][] com.cisco.epm.license.LicensingManager -:::::- License is valid [true] for SeriveType [1]
2014-07-20 23:46:58,693 WARN [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- --- GuestPortalUtils: Una
ble to determine language. Defaulting to English
2014-07-20 23:46:58,702 INFO [portal-http-844315][] cisco.cpm.provisioning.cache.FlowStateCacheManager -::0516a8c000001932f37acc53::guest:- Deleted old flow st
ate session with device id 5C-0A-5B-FC-37-0F

Cisco Network Setup Assistant with WIndows8

Hi, I'm trying to provisioning on Windows 8(Surface pro)
When the Cisco Network setup Assistant is on, it asks 'network password' while the ssid is wpa2-enterprise.
and I configured as it is on NSP.
Is it a bug ??

Hi,
What version of ise are you on, also what is the windows native supplicant provisioning version? See if the release notes for 1.2 meet your current design.
http://www.cisco.com/en/US/docs/security/ise/1.2/release_notes/ise12_rn.html#wp378491
Thanks,
Tarik Admani
*Please rate helpful posts*

Network Setup Assistant runs every time I turn the computer on.

Everytime I turn on my computer, Network Setup Assistant decides that it wants to help me locate and create a new network - which is awfully nice of it. The problem, however, is that it either a) never fully completes because of some failure, or b)doesn't need to happen in the first place because I can access my Airport network without the setup assistant.
Is there any way to turn the Network Setup Assistant off, or at least make is stop trying to help me when I don't need it to?

First you can just uncheck them if they are checked if there's nothing there that you want to open when you boot up. Usually there are software programs that you have downloaded
that you might have in your menu bar at bootup.
There might be the Mac HD. Check that if you want the HD window opened after bootup.

Unable to install the scanner on the HP LaserJet Pro 200 color MFP M276nw in windows 7 64 bit

HI
am unable to install the scanner on the HP LaserJet Pro 200 color MFP M276nw Drivers in windows 7 64 bit , after runing the setup ,the printer will finshing the installation process and and it will show that the HP Scan and HP fax failed.

Hi @Chembo ,
I see you're experiencing issues installing the printer software. I will do my best to assist you with this issue.
I would disable all the start up programs and temporarily turn off the Antivirus Software and any Real Time Scanning in the Antivirus Software also, to see if that is causing the issue. How to use MSCONFIG . Click on the Startup tab and click Disable all, Then click the Services tab and check Hide All Microsoft Services.
Restart the computer.
Disconnect the USB cable from the printer.
Run the uninstall from the CD.
Go start, computer, right click on the CD for the printer, left click open in a new window, double click on uninstall.
Make sure that the print spooler service is running.
Right-click Print Spooler, and then click Properties.
If the Startup type is set to Manual or Disabled, click the drop-down list, click Automatic, and then click Apply.
Under Service status, click Stop and then Start, and then click OK.
Run the installation again and don't connect the cable until prompted.
Test the printer.
Then you will have to go back and enable the Startup programs, Microsoft Services and turn the Antivirus Software back on again.
If you need further assistance, just let me know.
Have a nice day!
Thank You.
Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos Thumbs Up" on the right to say “Thanks” for helping!
Gemini02
I work on behalf of HP

ISE BYOD Android : Impossible to launch "Network setup assistant"

Hello
The Byod procedure fails when launching "Network setup assistant"
Error message is: "This profile could not be downloaded, are-you connected to Guest Portal ?"
WLC 5508 (VM) 7.5
Wlan : Flexconnect
Config : AP Flexconnect
ISE 1.3
Android 4.1.2
Here are the step:
1: Rule CWA : Redirect to Guest portal : OK
2: Rule CWA : Redirect to device portal : OK
3: Rule Android_dualSSID : Downloading "Network setup assistant" from Googleplay : OK
4: Rule Android_dualSSID : Launch "Network setup assistant 1.2.40" : NOK
Note : Profile "CWA_GooglePlay" = Redirect-ACL (NSP-ACL-Google)
The NSP-ACL-Google looks like:
(Taken from Flexconnect AP):
Extended IP access list NSP-ACL-Google
    10 permit ip any host <IP ISE>
    20 permit ip host <IP ISE> any
    30 permit udp any range 0 65535 any eq domain
    40 permit udp any eq domain any range 0 65535
    50 permit ip any 74.128.0.0 0.0.255.255
    60 permit ip 74.128.0.0 0.0.255.255 any
    70 permit ip any 173.194.0.0 0.0.255.255
    80 permit ip 173.194.0.0 0.0.255.255 any
    90 permit ip any 206.111.0.0 0.0.255.255
    100 permit ip 206.111.0.0 0.0.255.255 any
    110 permit ip any 74.125.0.0 0.0.255.255
    120 permit ip 74.125.0.0 0.0.255.255 any
    130 permit ip any 208.117.224.0 0.0.0.255
    140 permit ip 208.117.224.0 0.0.0.255 any
    150 permit ip any 216.12.120.0 0.0.0.255
    160 permit ip 216.12.120.0 0.0.0.255 any
    170 deny ip any any
Could you please help
Michel Misonne

Hello
We use the one describe in "Cisco Unified Access (UA) and Bring Your Own
Device (BYOD) CVD"
I tried also with this one:
Extended IP access list NSP-ACL-Google
    10 permit ip any host 10.35.124.195
    20 permit ip host 10.35.124.195 any
    30 permit ip any host 10.35.65.4
    40 permit ip host 10.35.65.4 any
    50 deny ip any 72.163.1.0 0.0.0.255
    60 permit ip any any
10 : ISE
20 : ISE
30 : DNS
40 : DNS
50  :Enroll.cisco.com= 72.163.1.80 ( To redirect the Network setup assistant to ISE)
(Enroll.cisco.com is the adresse that the Network setup assiatnt is tryiong to connect)
Regards
Michel

Setup was unable to compile the file ccmclasses.mof

First i have a access denied problem with push installation ;
MSI: Setup was unable to create the WMI namespace CCM
The error code is 80070005
MSI: Warning 25101. Setup was unable to delete WMI namespace ccm\dcm
The error code is 80070005
Installation failed with error code 1603
I've tried many actions include deleting repository directory and rebuilding dll and mof files ...
Finally i've added LOCAL SERVICE, NETWORK SERVICE, and SYSTEM accounts to Local administrators group and now there is no 80070005 error.
But i ve got a new error :)
MSI: Setup was unable to compile the file ccmclasses.mof
The error code is 8004402F
MSI: Warning 25002. Failed to delete CCM_Service_ErrorHandlerRegistration.Clsid="{0F95BCE5-2209-488a-B4BC-4396AD233C8D}" from CCM
The error code is 80041010
Installation failed with error code 1603
i ve almost 2000 clients with this situation and i think i lost my mind very soon.
Any help is appreciated.

Hi Bulent,
Very glad to hear the issue resolved and thanks for sharing your experience, which can help other community members facing similar problems. Also, if you have any further concerns, please do not hesitate to let us know and we are happy to be of further
assistance.
Thanks,
Yog Li -- Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

I have iWork 09 with a family license. I am unable to install the software on my new Macbook Pro (the message is simply "Installation failed"). I wonder if I need to remove an old computer from the family license, and if so, how?

I have iWork 09 with a family license. I am unable to install the software on my new Macbook Pro (the message is simply "Installation failed"). I wonder if I need to remove an old computer from the family license, and if so, how?

Yes, gladly. I am trying to install on a 13" MacBook Pro with OS X 10.8.3. I insert the disk into the SuperDrive. The I work '09 window pops up with two icons: one Tim install and one that says "Read before you install iWork." I double-click on the "Install iWork '09" icon, and a window appears that says, "This package will run a program to determine if the software can be installed." I click "continue" and see "Welcome to the iWork '09 installer." I click on "Continue." The "read me" bullet on the left lights up, and I see "Read before you install. . . ." I click "Continue," then see the software license agreement. When I click on "Continue" again, I am asked to agree, and I do. The window then says, "Standard Install on 'Mackintosh HD" and indicates how much space the program will take.
I click "Install," enter my password, and the installation begins. It goes through a validating phase and begins "writing files." It indicates that installation will take about 30 minutes (although that number fluctuates). After about four minutes it goes to "cleaning up." Then after just a few seconds, the "Summary" bullet on the left lights up and this message appears: "There were errors with the installation. You may want to try installing again." There is a large yellow triangle with an exclamation point in it, and a bold "The installation failed." Below that appears "The installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance."
At that point, a "Close" button is pulsating blue at the bottom of the window.
Sorry for the tedious detail. Anything revealing there?
Thanks!

Unable to install the updated version of iTunes

Hi All.
I am unable to install the updated version i.e. 10.7 iTunes. I have downloaded it and while installing process it moves until the last and rolls it back.
I have uninstalled itunes and tried again. Could not downloaded. Sowhow I have donloaded the version 10.1 which is no more compatible for my iPhone 4S with iOs 6.
I have read through many threads on the same topic but did not help. Please help here with any suitable idea.
Thanks,
Shan

"There is a probelem with this Windows Installer Package. A program run as part of the setup did not finish as expected. Contact your suppor personnel or package vendor."
Let's try the following user tip with that one:
"There is a problem with this Windows Installer package ..." error messages when installing iTunes for Windows

Boot Up & Network Setup Assistant

After booting up my iMac, I always get the Network Setup Assistant dialogue box in centre of screen. Sure, i can close it down, but why does it come up in the first place?
Bill

Go to the Apple menu, choose System Preferences, click the Accounts icon and then click the Login Items tab. If Network Setup Assistant is in the list, remove it.

ISE v1.1.1 Network Setup Assistant errors

Hello Everyone.
I've been having some difficulties with ISE v1.1.1 while setting up and testing the SISE course. It's setup so that BYOD users can self-service a guest account with the ISE and register their device. After that the Network Setup Assistant (NSA) is supposed to push the certificates to the system and make it able to access the network. My problems are two fold in is situation. Firstly I have a second interface setup without a gateway for RDP access that the NSA seems to select everytime for the interface it wants to setup, I've bypassed this for the time being with direct access to the machine.Is there a way to direct the NSA to the correct interface? Secondly Once the NSA is running, it will push the RA certificate to the machine and then immediately goto an error that the NSA cannot setup the network. I cannot find an error code on the NSA agent nor can I find a log to help me pinpoint the error the NSA encountered. Any ideas or help I can recieve with this will be appricated.
As far as I can tell the cwa and nsp redirects are working as intended. The Switch for Dot1x downloads the correct dACLs and the authorization profiles are placed correctly
Thank you.

Open Java Control Panel, click the Advanced tab, go to Perform certificate revocation checks on and select Do not check

I am unable to install the groupware synchronization software in CRM UI

Hi Expert,
I am unable to install the groupware synchronization software in CRM UI.Please find the attached image in this install button is disable.my system have Microsoft outlook 2013 and Microsoft visual studio tools.
please check once and let me know what is problem.
Thanks in advance.
Thanks
Jana J

Hi Gervase,
I have downloaded latest one already.
For this i am following below step to install
Go to transaction SE80 and choose 'BSP Application'.
Search for 'CRMCMP_GW_WC'.
Go to the folder MIMEs and right click on the 'setup.exe' (or setup.msi, if you are using the old series).
Choose the option 'Upload/Download' and then 'Upload and Replace'.
In the pop-up choose the path to latest setup.exe file.
But its running long time.
please give me solution for this.
Thanks
J Jana

Unable to install the adobe protected content module

I'm getting an unable to install the adobe protected content module error while trying to watch video on a website I've used millions of times (http://video.citytv.com/video/ ).    I've checked on your link to find that I'm running version 10.3.183.29 on mac os x 10.5.8 which is the most current flash I can have with my operating system. I've changed from Chrome, to firefox to safari to watch this site with no luck on any browsers. I'm getting pretty frustrated. Please Help.

Hi Justine,
We're looking into citytv.com and the brightcove setup there.
In the meantime, could you see if "known good" content plays using the Mac OSX setup and player you have?
1. Open the Adobe test player http://drmtest2.adobe.com:8080/TVP/TestVideoPlayer_FP.html
2. In the URL field, enter http://drmtest2.adobe.com:8080/Content/anonymous.f4v     (case-sensitive)
3. Press the [Update Adobe CP] button. It should log "AdobeCP update Complete. Updating time: xxxx milliseconds" at the right.
4. Press the [Play] button and see if you see the Getty Train video playing.
For our internal testing, we were using the 30Rock episode 6, season 7:
http://video.citytv.com/video/detail/1971593280001.000000/aunt-phatso-vs-jack-donaghy/
What error are you getting during attempted playback?
We assume you're from Canada since CityTV is from Canada.
What we see is: if we try to play this content from the U.S, it fails to play on any platform (Windows 7, Windows XP, Mac OSX 10.8, 10.5.7 with various browsers & players) but we see no error - just blank video area.
When we use a system in our Canada office, playback works and it also works when we use VPN.   Is it possible there is some issue with checking geo-location?   (are you perhaps inadvertently logged into a VPN to the US during your playback tests?   or traveling?)
Thanks.
Stephen

Unable to install the bbm 7 ...please help me

Hi experts,
Iam using the bb torch 9860 with Vodafone network ..iam unable to download the bbm 7 messenger it pop up as there is a error in downloading the messenger ..the os is 7 ....please help me in installing the bbm 7 messener .
Solved!
Go to Solution.

That's because BBM7 is not yet officially supported (usable) in India.
You can download here
1. If any post helps you please click the below the post(s) that helped you.
2. Please resolve your thread by marking the post "Solution?" which solved it for you!
3. Install free BlackBerry Protect today for backups of contacts and data.
4. Guide to Unlocking your BlackBerry & Unlock Codes
Join our BBM Channels (Beta)
BlackBerry Support Forums Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

"Unable to install the GEAR driver set." in Vista Premium solution!

If you're getting the "Unable to install the GEAR driver set." error, go into regedit, navigate to HKEYLOCALMACHINESYSTEMCurrentControlSetServicesGearAspiWDM and delete the DeleteFlag key. Run the iTunes upgrade/setup package and iTunes should install correctly.
If you get an error about explorer.exe being open, use the Tasks section of Task Manager to stop the explorer.exe application.

Is this 64 or 32 bit Vista?

Cisco Network Setup Assistant Unable to install the certificate on Android KitKat

Similar Messages

Maybe you are looking for