Cisco Network Setup Assistant with WIndows8

                   Hi, I'm trying to provisioning on Windows 8(Surface pro)
When the Cisco Network setup Assistant is on, it asks 'network password' while the ssid is wpa2-enterprise.
and I configured as it is on NSP.
Is it a bug ??

Hi,
What version of ise are you on, also what is the windows native supplicant provisioning version? See if the release notes for 1.2 meet your current design.
http://www.cisco.com/en/US/docs/security/ise/1.2/release_notes/ise12_rn.html#wp378491
Thanks,
Tarik Admani
*Please rate helpful posts*

Similar Messages

  • ISE cannot push the profile to the cisco network setup assistant?

    We have tried a few android devices with version 4.2+ but still got the error message ‘Unable to download profile.(Have you logged into the guest portal?)’ as shown at the bottom picture.
    In fact, we are connecting the devices to an open SSID which performs MAC filtering, then redirect to CWA and login with AD credentials,
    then redirect to Google play store and can successfully download the network setup assistant.
    Could you please advise the possible reasons that would cause this error message and make ISE cannot push the profile to the cisco network setup assistant?

    Here's a snipit from the Android spw.log.  I see that there is an error trying to verify the hostname.  Is it possible that this is caused by a non-trusted certificate?  I'm using the self-signed cert built into ISE.  I have an entry in the public DNS for guest.domain.com that resolves to the IP of my ISE server accessible from the guest subnet.  I'm allowing all traffic from the guest VLAN to the ISE vlan on the firewall and all traffic to/from the ISE server in the provisioning ACL I have applied by ISE on the WLC during native supplicant provisioning.  I know that guests can communicate with the ISE server since regular guest portal redirection works, just not the network setup assistant.  I've renamed the domain to domain.com in this snipit.
    2014.07.20 23:44:48 INFO:verion :4.4.4 SDK Level : 19
    2014.07.20 23:44:48 INFO:State :START
    2014.07.20 23:44:48 INFO:Starting Discovery
    2014.07.20 23:44:48 INFO:Starting ISEDiscoveryAsynchTask
    2014.07.20 23:44:48 INFO:DHCP Stringipaddr 192.168.30.110 gateway 192.168.30.1 netmask 255.255.255.0 dns1 208.67.222.222 dns2 208.67.220.220 DHCP server 192.168.30.1 lease 3600 seconds
    2014.07.20 23:44:48 INFO:DHCP ipaddress192.168.30.110
    2014.07.20 23:44:48 INFO:DHCP gateway192.168.30.1
    2014.07.20 23:44:48 INFO:Discoverng ISE http return code :200
    2014.07.20 23:44:48 INFO:ISEServer =guest.domain.com
    2014.07.20 23:44:48 INFO:session =0516a8c000001932f37acc53
    2014.07.20 23:44:48 INFO:Discovered using gateway :18786496
    2014.07.20 23:44:48 INFO:Discovered ise server = guest.domain.com
    2014.07.20 23:44:48 INFO:Discovered client mac = 5C-0A-5B-FC-37-0F
    2014.07.20 23:44:48 INFO:Server:Key=guest.domain.com:0516a8c000001932f37acc53
    2014.07.20 23:44:48 INFO:Downloading config fromguest.domain.com
    2014.07.20 23:44:48 INFO:checkServerTrusted call
    2014.07.20 23:44:48 INFO:checkServerTrusted call
    2014.07.20 23:44:48 ERROR:DownloadprofileAsynchTask
    2014.07.20 23:44:48 ERROR:java.io.IOException: Hostname 'guest.domain.com' was not verified
    2014.07.20 23:44:48 ERROR:Hostname 'guest.domain.com' was not verified
    2014.07.20 23:44:48 INFO:Internal system error.
    On the ISE side, here is the snippet of logs during the same time as when the android network setup assistant was run.
    2014-07-20 23:41:38,586 INFO   [DefaultQuartzScheduler_Worker-6][] cisco.cpm.infrastructure.utils.NodeGroupFWUtil -:::::- Applied Firewall rules for node group.
    2014-07-20 23:42:35,251 INFO   [AbandonedTransactionReaper][] com.cisco.epm.db.AbandonedTransactionReaper -:::::- In AbandonedTransactionReaper :  MaxActive : 20
    0 CurrentActive : 0 MaxIdle : 200 MinIdle : 0 CurrentIdle : 2
    2014-07-20 23:42:39,394 INFO   [AbandonedTransactionReaper][] com.cisco.epm.db.AbandonedTransactionReaper -::::PDPInitialization:- In AbandonedTransactionReaper
    :  MaxActive : 200 CurrentActive : 0 MaxIdle : 200 MinIdle : 0 CurrentIdle : 0
    2014-07-20 23:42:49,765 INFO   [DataSourceListener Thread][] api.services.persistance.dao.DistributionDAO -:::::- In DAO getRepository method for HostConfig Type
    : ACTIVE
    2014-07-20 23:42:56,805 INFO   [PDP-Heartbeats-0][] com.cisco.cpm.clustering.MnTClient -::::pdpha:- Removing session 0516a8c00000196f2a95cc53
    2014-07-20 23:42:56,806 WARN   [PDP-Heartbeats-0][] cpm.nsf.session.impl.SystemStateManager -::::pdpha:- Session 0516a8c00000196f2a95cc53 not found at complete
    2014-07-20 23:43:35,441 INFO   [portal-http-844314][] cisco.epm.license.flexlm.FlexlmFileHandler -:::::- Is License Valid for seId [1] = true
    2014-07-20 23:43:35,441 INFO   [portal-http-844314][] com.cisco.epm.license.LicensingManager -:::::- License is valid [true] for SeriveType [1]
    2014-07-20 23:43:35,750 WARN   [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- --- GuestPortalUtils: Una
    ble to determine language. Defaulting to English
    2014-07-20 23:43:35,768 WARN   [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- --- GuestPortalUtils: Una
    ble to determine language. Defaulting to English
    2014-07-20 23:43:35,768 INFO   [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- initializing page definit
    ion
    2014-07-20 23:43:35,769 INFO   [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- Created guest theme page
    def
    2014-07-20 23:44:18,090 WARN   [portal-http-844315][] cisco.cpm.guestportal.actions.SelfProvisioningAction -:test:0516a8c000001932f37acc53::guest:- ***BYOD Regi
    stration Data***
    macAddress: 5C:0A:5B:FC:37:0F
    portalUser: test
    authStoreName: Internal Users
    authStoreGuid: 78954c30-e0f0-11e3-af67-005056bf4689
    2014-07-20 23:44:18,113 INFO   [portal-http-844315][] com.cisco.epm.jms.AQMessgeHandler -:test:0516a8c000001932f37acc53::guest:- Publishing message for event [T
    xnCommit / commit] and message class[class com.cisco.epm.pap.api.transaction.Transaction]
    2014-07-20 23:44:18,167 WARN   [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- --- GuestPortalUtils
    : Unable to determine language. Defaulting to English
    2014-07-20 23:44:18,168 INFO   [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- initializing page de
    finition
    2014-07-20 23:44:18,169 INFO   [portal-http-844315][] cisco.cpm.guestportal.utils.CoAExecutorService -:test:0516a8c000001932f37acc53::guest:- Issue CoA reauth i
    n 2000 milliseconds for sessionName 0516a8c000001932f37acc53
    2014-07-20 23:44:18,171 WARN   [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- --- GuestPortalUtils
    : Unable to determine language. Defaulting to English
    2014-07-20 23:44:18,172 INFO   [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- initializing page de
    finition
    2014-07-20 23:44:18,173 INFO   [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- Created guest theme
    page def
    2014-07-20 23:44:20,171 INFO   [pool-19-thread-4][] cisco.cpm.guestportal.utils.CoAReauthTask -:test:0516a8c000001932f37acc53::guest:- Running CoAReauthTask for
     _sessionName 0516a8c000001932f37acc53
    2014-07-20 23:44:20,194 INFO   [pool-19-thread-4][] cisco.cpm.guestportal.utils.CoAReauthTask -:test:0516a8c000001932f37acc53::guest:- Issue Local CoA for sessi
    on 0516a8c000001932f37acc53
    2014-07-20 23:44:50,768 INFO   [ContainerBackgroundProcessor[StandardEngine[Catalina]]][] cpm.admin.infra.action.SessionCounterListener -:::::- sessionDestroyed
    - deducted one session from counter - Session ID - 0FFE9C73C9209D4EE2534558CB8F723B - Session Count - 0
    2014-07-20 23:46:58,502 INFO   [portal-http-844315][] cisco.epm.license.flexlm.FlexlmFileHandler -:::::- Is License Valid for seId [1] = true
    2014-07-20 23:46:58,502 INFO   [portal-http-844315][] com.cisco.epm.license.LicensingManager -:::::- License is valid [true] for SeriveType [1]
    2014-07-20 23:46:58,693 WARN   [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- --- GuestPortalUtils: Una
    ble to determine language. Defaulting to English
    2014-07-20 23:46:58,702 INFO   [portal-http-844315][] cisco.cpm.provisioning.cache.FlowStateCacheManager -::0516a8c000001932f37acc53::guest:- Deleted old flow st
    ate session with device id 5C-0A-5B-FC-37-0F

  • Cisco Network Setup Assistant Unable to install the certificate on Android KitKat

    Greetings,
    I'm having issues with deploying the CA. Although the Cisco app fails, the user cert (but no CA) appears to install and is accessible during wifi setup. I am running the latest version of Cisco Network Setup Assistant 1.2.42. The phone is running Android KitKat 4.4.4, not rooted, running stock T-Mobile rom. I'm able to authenticate with the guest side, and get as far as Installing Certificates... Reference the screen shots attached. 
    Error message cisco Network Setup Assistant: "Unable to install the certificate. Exit the application and run it again to continue to the installation."
    I have ran the application several times, it keeps returning to this same message.
    After failure of the Cisco app, I noticed there is a certificate manager with CA cert and key, and than subsequently one new key continues to loop after until I cancel (also in screenshots).
    I have tried decryption, removing all security, and clearing credentials, yet the problem persists. Any help is appreciated. 

    Greetings,
    I'm having issues with deploying the CA. Although the Cisco app fails, the user cert (but no CA) appears to install and is accessible during wifi setup. I am running the latest version of Cisco Network Setup Assistant 1.2.42. The phone is running Android KitKat 4.4.4, not rooted, running stock T-Mobile rom. I'm able to authenticate with the guest side, and get as far as Installing Certificates... Reference the screen shots attached. 
    Error message cisco Network Setup Assistant: "Unable to install the certificate. Exit the application and run it again to continue to the installation."
    I have ran the application several times, it keeps returning to this same message.
    After failure of the Cisco app, I noticed there is a certificate manager with CA cert and key, and than subsequently one new key continues to loop after until I cancel (also in screenshots).
    I have tried decryption, removing all security, and clearing credentials, yet the problem persists. Any help is appreciated. 

  • ISE BYOD Android : Impossible to launch "Network setup assistant"

    Hello
    The Byod procedure fails when launching "Network setup assistant"
    Error message  is: "This profile could not be downloaded, are-you connected to Guest Portal ?"
    WLC 5508  (VM) 7.5
    Wlan : Flexconnect
    Config : AP Flexconnect
    ISE 1.3
    Android 4.1.2
    Here are the step:
    1: Rule CWA : Redirect to Guest portal : OK
    2: Rule CWA : Redirect to device portal : OK
    3: Rule Android_dualSSID : Downloading "Network setup assistant" from Googleplay : OK
    4: Rule Android_dualSSID :  Launch "Network setup assistant 1.2.40"  : NOK
    Note : Profile "CWA_GooglePlay" = Redirect-ACL (NSP-ACL-Google)
    The NSP-ACL-Google looks like:
    (Taken from Flexconnect AP):
    Extended IP access list NSP-ACL-Google
        10 permit ip any host <IP ISE>
        20 permit ip host <IP ISE> any
        30 permit udp any range 0 65535 any eq domain
        40 permit udp any eq domain any range 0 65535
        50 permit ip any 74.128.0.0 0.0.255.255
        60 permit ip 74.128.0.0 0.0.255.255 any
        70 permit ip any 173.194.0.0 0.0.255.255
        80 permit ip 173.194.0.0 0.0.255.255 any
        90 permit ip any 206.111.0.0 0.0.255.255
        100 permit ip 206.111.0.0 0.0.255.255 any
        110 permit ip any 74.125.0.0 0.0.255.255
        120 permit ip 74.125.0.0 0.0.255.255 any
        130 permit ip any 208.117.224.0 0.0.0.255
        140 permit ip 208.117.224.0 0.0.0.255 any
        150 permit ip any 216.12.120.0 0.0.0.255
        160 permit ip 216.12.120.0 0.0.0.255 any
        170 deny ip any any
    Could you please help
    Michel Misonne

    Hello
    We use the one describe in "Cisco Unified Access (UA) and Bring Your Own
    Device (BYOD) CVD"
    I tried also with this one:
    Extended IP access list NSP-ACL-Google
        10 permit ip any host 10.35.124.195
        20 permit ip host 10.35.124.195 any
        30 permit ip any host 10.35.65.4
        40 permit ip host 10.35.65.4 any
        50 deny ip any 72.163.1.0 0.0.0.255
        60 permit ip any any
    10 : ISE
    20 : ISE
    30 : DNS
    40 : DNS
    50  :Enroll.cisco.com= 72.163.1.80  ( To redirect the Network setup assistant to ISE)
    (Enroll.cisco.com is the adresse that the Network setup assiatnt is tryiong to connect)
    Regards
    Michel

  • ISE v1.1.1 Network Setup Assistant errors

    Hello Everyone.
    I've been having some difficulties with ISE v1.1.1 while setting up and testing the SISE course. It's setup so that BYOD users can self-service a guest account with the ISE and register their device. After that the Network Setup Assistant (NSA) is supposed to push the certificates to the system and make it able to access the network. My problems are two fold in is situation. Firstly I have a second interface setup without a gateway for RDP access that the NSA seems to select everytime for the interface it wants to setup, I've bypassed this for the time being with direct access to the machine.Is there a way to direct the NSA to the correct interface? Secondly Once the NSA is running, it will push the RA certificate to the machine and then immediately goto an error that the NSA cannot setup the network. I cannot find an error code on the NSA agent nor can I find a log to help me pinpoint the error the NSA encountered. Any ideas or help I can recieve with this will be appricated.
    As far as I can tell the cwa and nsp redirects are working as intended. The Switch for Dot1x downloads the correct dACLs and the authorization profiles are placed correctly
    Thank you.

    Open Java Control Panel, click the Advanced tab, go to Perform certificate revocation checks on and select Do not check

  • Network Setup Assistant won't recognize my password

    Hi There,
    new to macs, can't get the Network Setup Assistant to recognize the password that I've typed in. I have several other computers attached to the network, but can't get the mac to. I'm flummoxed. Please help.

    Hi ddethomas, and a warm welcome to the forums!
    What form of encryption does the Router use, WEP, WPA, WPA2?
    Sory to see your 1st post got no answers, it helps to bump it with a reply again to bring it to the top again, but it's archined/vlosed now except to you.

  • Boot Up & Network Setup Assistant

    After booting up my iMac, I always get the Network Setup Assistant dialogue box in centre of screen. Sure, i can close it down, but why does it come up in the first place?
    Bill

    Go to the Apple menu, choose System Preferences, click the Accounts icon and then click the Login Items tab. If Network Setup Assistant is in the list, remove it.

  • Is there a way to "turn off" Network Setup Assistant?

    Every time I turn on my computer, the Network Setup Assistant runs. No matter what I try, it doesn't ever fully set-up, or go away. Obviously I'm online now, so I don't need to set up a Network.
    Is there someway to turn it off or make it stop automatically trying to create a network?

    First you can just uncheck them if they are checked if there's nothing there that you want to open when you boot up. Usually there are software programs that you have downloaded
    that you might have in your menu bar at bootup.
    There might be the Mac HD. Check that if you want the HD window opened after bootup.

  • Network Setup Assistant runs every time I turn the computer on.

    Everytime I turn on my computer, Network Setup Assistant decides that it wants to help me locate and create a new network - which is awfully nice of it. The problem, however, is that it either a) never fully completes because of some failure, or b)doesn't need to happen in the first place because I can access my Airport network without the setup assistant.
    Is there any way to turn the Network Setup Assistant off, or at least make is stop trying to help me when I don't need it to?

    First you can just uncheck them if they are checked if there's nothing there that you want to open when you boot up. Usually there are software programs that you have downloaded
    that you might have in your menu bar at bootup.
    There might be the Mac HD. Check that if you want the HD window opened after bootup.

  • How can I re-run setup assistant with mountain lion?

    I have run the setup assistant on my MacBook Pro but now realize that I'd rather run the setup assistant again in order to transfer the contents of my old mac to the new one.
    There are a few suggestions out on the web but none have worked for me.

    To transfer files from an old Mac, open Migration Assistant and follow its steps > http://support.apple.com/kb/HT4889

  • Network setup 'DHCP with manual address' changes to 'Using DHCP'

    I have setup my local network with a manual address and have observed that the setting changes without my doing to simply Using DHCP. I can't get the setup to continue using a manually assigned ip address. Even though I've saved the network settings preferences, they revert to 'Using DHCP'. Any ideas? Thanks in advance.

    If you "have setup (your) local network with a manual address," does that mean you have disabled DHCP in your router? If so, then you'd want to configure "manually" in your Sys Prefs > Network.
    Or did you mean that you have setup a computer on your local network with a manual address using DHCP? (And that your router has DHCP enabled?)
    If the router's DHCP is enabled, many routers will allow you to set aside a subset of IP addresses to the DHCP pool, and the remainder are, by definition, reserved for static addressing. Are you assigning the computer requiring a static IPA (but using DHCP defined gateway and subnet) an address falling within the static address range of your local subnet?
    If you can't partition the address space between static IP addresses and DHCP-assigned IP addresses when DHCP is enabled, are you assigning a high-numbered IP address to the computer whose Sys Prefs has DHCP with manual address?

  • PowerBook G4 not connecting to new Apple network setup up with Time Capsule

    I have a MacMini and Macbook Pro which I have successfully setup to work on a home network with my new 500GB Timecapsule. Only the MacBook Pro wirelessly uses Time Machine with the Time Capsule and the MacMini has its own external back-up.
    The Problem is I also have an older PowerBook G4 running 10.2.8 so that my daughter can also run older pre-OS X kids programs and my wife uses the wireless internet on it...until now.
    Can you explain why my powerbook will not recognize or login to my new Time capsule network when it was working fine on my old linksys wireless-g? I only want internet access...no back-up.

    You could have the time capsule set up for 802.11N. If your powerbook is 802.11b/g then it will not connect. You would have to make sure that the times capsule is set up for b/g as well.

  • TS3576 LAN option is greyed out in Network Setup Assistant .I have connected this and restarted my system,but still its greyed out.Please help me

    Even I have connected to a LAN cable,I am not able to setup a LAN network .Please help me.

    Hello cmack4, 
    Welcome to the forums. 
    Are you able to connect to a Wi-Fi network and then try to do the update again or are all connection settings grayed out? 
    -SR
    Come follow your BlackBerry Technical Team on twitter! @BlackBerryHelp
    Be sure to click Kudos! for those who have helped you.Click Solution? for posts that have solved your issue(s)!

  • Can't create new account after running Mac OS X Setup Assistant

    Please help me...!
    Yesterday, my friend gave me his old MacBook (Mac OS X Tiger)...
    He said that he forgot his password and didn't know how to reset it...
    Soon, I do the Setup Assistant with this :
    1. holding down Command + S.
    2. fsck -yf
    mount -uw /
    3. Remove current Netinfo Database:
    cd /private/var/db/netinfo
    mv local.nidb local.old
    4. Force Apple Setup to launch on next startup:
    rm ../.AppleSetupDone
    5. Don't forget to delete the home folders from every user on the system in /Users!
    6. Shut down the mac:
    shutdown -h now
    But after running the Setup Assistant and after filling all of the important information, The "Welcome" video come again and the mac just run the Setup Assistant again....
    I'm so confused with this... so please help me....I need it so Bad...hhe...
    (Ehm...sorry for my BAD English..hhehe..)

    Hi MemphisBELLE, and a warm welcome to the forums!
    You've done about everything you can without The Install Disk, if your friend doesn't have that then call Apple with the Serial# handy, or seek an Apple Store/Provider.

  • Network Cofiguration Assistant failed to insatll

    Hello everyone,
    I'm trying to install Oracle 9i on Fedora 9.
    Initially before the installation starts, it gives a pop-up error message which says:
    "Error: You do not sufficient privileges to write to the specified path. in component Database Configuration Assistant 9.2.0.1.0. Installation cannot continue for this component".
    And then it gives two options: 1) Stop installation of all products and 2) Stop installation of this component only. if i select the first option, the installation aborts.
    if i select the second option, the installation continues upto Oracle Network Configuration Assistant. and then it fails to install the Network Configuration Assistant with the error message:
    "/u01/app/oracle/jre/1/1/8/bin/../lib/i686/native_threads/libzip.so: symbol errno, version GLIBC_2.0 not defined in file libc.so.6 with link time reference (libzip.so)
    Unable to initialize threads: cannot find class java/lang/Thread
    Could not create java_VM"
    i then installed libzip.so package with the command: yum install libzip.so
    And then i tried to run the OUI again. I click next on all the windows and it still gives the pop-up error message and when i click on "install" button to reinstall, it attempts and then jumps to the screen that says "installation unsuccessfull".
    Please help me out here. Thanks in advance to all.

    In fact, Fedora is not a certified OS for Oracle at all. However, there are oracle users who choose this OS for testing and learning, not for production environments. In general Oracle doesn't support free linux distros, even if they are directly based on certified OS' like Redhat.
    ~ Madrid
    http://hrivera99.blogspot.com/

Maybe you are looking for

  • Material Ageing Report

    Hi I need the Material Ageing report as the given following requirement 1) Material With GR Date 2) The Ageing will be for 30, 60, 90, 180, 270, 360 3) Material with Normal & Special Stock 4) Material with the Split Valuation If any one have worked o

  • Incorrect value of Auto. Gain Loss Foreign Exchange during GR/IR clearing

    Dear Experts, We have activated the Material Ledger functionality. The Document Currency of PO, GR, and IR are in Foreign Currency. The postings are below: Loc Currency 1 = USD Loc Currency 3 = IDR Doc currency = IDR GR Dr Material               52,9

  • Uneven keyboard backlighting

    I've had my 17-inch unibody for a few weeks. The keyboard backlighting is uneven. The 5 key is much lighter than the other keys, and the keys surrounding the 5 are also a little lighter. Is this normal, or within spec? I don't see this on my Rev A Ma

  • Reading Advanced Metadata in Smart Collections, not working in Bridge CS6

    In Bridge CS5 you could make an Smart collection that were looking for: All metadata > contains > "here we add a value from a metadata only visible from the Advanced tab in File info" But this nolonger works in CS6. Although I can go to File info and

  • I-Book G4 start-up Issue

    I power on the I-Book G4, and all I hear is the fan running. The O.S. doesn't boot up, and nothing comes up on screen. Could this be a loose cable not connected ( DIY Fix? ) or escalate to the Apple Pro's?