Issue with iphone configuration utility: eap-tls certificate selection

hello,
I am a new Apple user so if there's anything obvious, please bear with me. I also tried to search in the forum but didn't find any solution.
here's my issue:
I use iphone configuration utility v2.1 for windows. I added 2 certificates(one user cert and one CA cert) under 'credentials'. then i configured one wifi network (eap-tls using the certificate i justed added). then i synced with my phone. everything worked fine so far. however, when I tried to connect to wifi, i got error and found out that iphone was using a certificate issued by IPCU CA instead of the certificate i uploaded.
this behavior could be corrected by manually change the certificate from wireless setting. however, this has to be done every time I try to connect to wireless network which is quite frustrated. a workaround is to email me the certificate and install it from iphone. but i can't install the CA certificate via this way.
i am wondering if anyone has similar issue and how to fix this.
thanks,
-ns

the configuration utility doesn't allow you to select the iPCU cert which is kind of a self signed by the software. you could only select the cert that you imported.
upgraded to ipcu ver 2.2 today and it seems to fix the problem. will monitor it for several days and report back.

Similar Messages

  • Issue with iPhone configuration utility

    I installed the iPhone configuration utility, create a camera restriction profile and loaded to the iPhone. Later on I restored my pc. This process deleted all my program files including the utility. I reinstalled the utility but now I cannot delete the profile. I know it is my fault because I lost the profile information but what can i do now? I tried an iPhone restore using iTunes but it restored all the settings including the profile. Looks like all I have left to do is erase all data and treat it as a brand new iPhone. Is this my only option?

    the configuration utility doesn't allow you to select the iPCU cert which is kind of a self signed by the software. you could only select the cert that you imported.
    upgraded to ipcu ver 2.2 today and it seems to fix the problem. will monitor it for several days and report back.

  • Cannot turn off iMessage in IOS 5.1 with Iphone Configuration Utility 3.5

    Summary:
    When phones are upgraded to the new iOS 5.1 and if they either have a iPhone Configuration Utility (IPCU) template already in stalled or if you install a new one there is no way to successfully turn off iMessage.  Used to work with iOS 5.0 by using IPCU and turning off 'Allow Facetime' and the end-user would no longer have facetime OR iMessage.  Do the same in the IPCU and apply it to a iOS 5.1 device and the iMessage will still work and FaceTime.  Take a 5.0 phone with the template already in stalled where iMessge and FaceTime do not work...then upgrade phone to iOS 5.1 and the iMessage comes back!
    Steps to Reproduce:
    Create a template in (unsigned) in IPCU and turn off 'Allow FaceTime'.  Apply this template through the use of the IPCU to an iPhone with iOS 5.1.  iMessage will NOT be disabled.
    OR
    Create a template in (unsigned) in IPCU and turn off 'Allow FaceTime'.  Apply this template through the use of the IPCU to an iPhone with iOS 5.0.  Then confirm iMessage is gone (not working or available) then upgrade teh iPhone to iOS 5.1 and you will see iMessage will NOT be disabled and is in proper working condition.
    Expected Results:
    By turning off the 'Allow FaceTime' in the IPCU this will and has in the past disabled and removed the FaceTime and iMessage Apps.
    Actual Results:
    By turning off the 'Allow FaceTime' feature in IPCU and loading it onto an iOS 5.1 iPhone the iMessge and FaceTime Apps still are there and work.
    Regression:
    We have been able to test and get the same results on the iPhone 4 and 4S for iOS 5.0 (works as promised) and then once upgraded to iOS 5.1 (doesn't work as promised)
    We have tried using IPCU 3.4 and 3.5 FYI.
    Anyone else see this issue?

    This seems to be working for me now but will keep monitoring it the next couple of times I use it to make sure its not a one time thing

  • Deploying iPads with iPhone Configuration Utility

    We are trying to deploy some iPad2s into an enterprise environment. I have been able to push some settings like WiFi or remove Safari via iPhone Configuration Utility. However, we are needing to have one app installed (Prezi) from the App Store. I can't find a way to do this via the Configuration Utility, so I installed the app before applying the profile. One the profile is applied it hides the app on the homescreen. As soon as I remove the policy the app shows right back up. Is there a setting somewhere in the policy that is causing this?
    On a related note, is there a better way to get the app installed automatically?

    You need an MDM  -- moble device management
    Use an MDM for free Meraki
    MDMs
    Airwatch, Nukona, Meraki, mobleIron, OS X Server, or Zenprise
    Nukona -- https://www.nukona.com/mobile-app-management-products/basic-edition/
    Meraki -- A free MDM
      http://www.meraki.com/products/systems-manager/
      https://discussions.apple.com/thread/4067210?tstart=0
      Good howto by Sergio Sosa.
      https://discussions.apple.com/thread/2594001?start=15&tstart=0
    I think the education site is better.
    IT Resources -- ios & OS X -- This is a fantastic web page.
    View documentation, video tutorials, and web pages to help IT professionals develop and deploy education solutions.
    http://www.apple.com/education/resources/information-technology.html
       business site is:
       http://www.apple.com/lae/ipad/business/resources/

  • Reload with iPhone Configuration Utility

    How can I reload an app on a iDevice via iPhone Configuration Utility, when I delete the app before, on the same device.

    Get your iPhone Connected via WIFI
    go to http://www.unlockit.co.nz (You will see an iPhone Formatted Website)
    Choose Create APN
    Choose United States
    Choose Straight talk
    Choose Create APN below the Carrier
    This will set the APN Data Settings for Straighttalk.
    This does not jailbreak or hack your iPhone in anyway and the website is used successfully by tens of thousands of people users per day all over the world. It uses the Same method as the iPhone Configuration Utility but some people find the iCU quite hard to use (or they don't know the settings/where to put the settings)

  • Uninstall IPhone Configuration Utility

    Hello together,
    after having a Problem with IPhone Configuration Utility (latest Version = 3.2), I had to stop the program by task-manager. Till now I get the Message "iCPU has encountered a user-defined breakpoint." The configuration utility does not start anymore, so i tried to uninstall the programm und installed it another time. But the message and the problem exists anymore.
    Do you have an idea what to do? There must be some parts of the programm i have to kill till i can reinstall?!
    Many thanks und kind regards,
    Markus

    sorry...i meaned IPhone Configuration Utility 3.1 !
    regards,
    Markus

  • IPhone Configuration Utility fixes "Up to 7 Devices" PC Sync Issue?

    Normally PC's can only sync up to 7 devices, whereas Macs can sync an unlimited number of devices.  For example, Datamation Systems created a product that allows a Mac to easily sync 49 iPads at once.   Unfortunately PC's seems to still be limited to 7.  I heard that Apple says the "iPhone Configuration Utility" can be used to overcome this "up to 7 devices" issue on PC's.  Can anyone confirm this?  And if this is true, can the same program be used to fix the issue for iPads as well?
    Thanks!

    I have a Datamation 16 port charge/sync device and was able to use all 16 ports on a PC running Windows 7 in iTunes.
    I heard the same thing before we purchased the 16 port device but have not had any limitation issues. We will be testing a 49 port sync only device soon and I'll let you know how it goes.

  • Hello. I wanted to know if the iPhone Configuration Utility is compatible with 5 ios?

    Hello. I wanted to know if the iPhone Configuration Utility is compatible with 5 ios?

    Apple iPhone Configuration Utility 3.4 was released yesterday.

  • IPhone Configuration Utility: Email with alias(es)

    Hello everybody!
    I have to add an email account to two iPhones and two iPads. The account includes many email aliases.
    In the iPhone settings there is the possibility to add aliases to an account, but it is long-winded by adding so many aliases.
    On my Mac I can add aliases by annexing the aliases after the main address in the address field in the preferences. (e.g. "[email protected], [email protected], [email protected])
    So I tried to create a configuration Profile with all account informations in the iPhone Configuration Utility (iPCU). This app is very comfortable for that tasks, but it seems there is no easy way to add an account with aliases! I didn't found a field for aliases in the email tab and the line of action like Mac's mail.app (main address and alias addresses in one text field separated by comma) doesn't work In addition I tried to write all addresses in the email address field separated by semicolon: failed
    Note: If I added an Email account to my iDevice via iPCU I'm not able to adjust the email address field in the iOS ettings, so I can't add aliases. If I leave the Email address field in the iPCU in blank, my iDevice request me to enter the address, but  I can't add aliases, too (However adding aliases on iDevice that isn't my intention, but maybe it is an good hint for you)
    Thanks for you support!

    I have exactly the same problem,  I bought temple run oz but it says not compatiable with my ipad 1G,  I used iphone configuration utility to install it and it works fine,  but now I cannot go back to itunes to sync,  it says sync completes but never really sync anything
    Anyway to help?

  • 802.1x WEP & iPhone Configuration Utility

    Hi All!!
    I have just arrived back from our Easter vacation to find the school I work for has changed wireless from WPA-PSK to 802.1x WEP. It didn't take long for me to change my MacBook Pro over to the new settings, but we (our IT Guys and myself) are having great difficulties with the iPhone Configuration Utility and the resulting Profile file. A continuous error message of "Unable to join the network "School_Name"".
    We have been using the same configurations for the iPhone in the Configuration Utility as we did for the MacBook Pro, but I keep having the feeling that we are missing something. I am a complete novice when it comes to this side of computing, but any help would be greatly appreciated.
    Here are the preferences we have been using:
    *_Network Prefs_* (Taken from MacBook Pro)
    Network Name: School's SSID
    Security: 802.1x WEP
    User Name: Domain Login Name
    Password: Domain Password
    *_802.1x Prefs_* (Taken from MacBook Pro)
    User Name: Domain Login Name
    Password: Domain Password
    Wireless Network: School's SSID
    Authentication: TLS
    TLS Certificate: VALID
    *_iPhone Configuration Utility_*
    We are little stuck as what to use for the Identifier under the General Tab in the iPhone Configuration Utility.
    We have set the Security Type to WEP Enterprise with the EAP Type as TLS.
    Under the Credentials Tab, we have generated a "School" certificate and a "User" certificate to be uploaded. These are the same type of certificates I have installed in my KeyChain on the MAcBook Pro.
    The subsequent Profile which is generated is uploaded to the iPhone via email and is installed successfully. The profile shows that it is verified. But, no connection is made. The iPhone is not even showing up on the AIS Server log.
    I hope that I have supplied enough information. If not, please ask for more.
    Thanks in advance.
    Rodger

    Update your iPhone Configuration Utility.
    There is a new option under "Security Type" Called "WEP Enterprise" This is 802.1X WEP.
    Have Fun

  • Issues with iPhone and Android connecting to Lync 2010?

    Our environment currently consists of a single Lync 2010 instance, which is currently performing all roles. The current challenge I'm running into is connectivity to iOS and Android devices not wanting to cooperate. Currently, Lync is using a certificate
    issued by a local CA. The CA root certificate has been imported to the devices that are having trouble connecting, and I've done this via email import without success, as well as using the iPhone Configuration Utility. In all tested instances, an error that
    "the certificate can't be verified" is displayed that prohibits a user from establishing a connection. All domain workstations and remote users that import the root CA have no issues connecting.
    I can't seem to figure out what's going on here. Has anyone run into this? This is a quasi-test environment in my lab that I'm testing with a few other people, and as much as we've tried, can't seem to figure out the issue. Any ideas?

    To confirm that the certificate has been installed successful do you have a corporate website that is available externally that uses a certificate issued by the CA in question? If the answer is yes I would browse to that site on the phone and see if you
    get an error. The Lync mobile clients don't give you a heck of a lot of information for troubleshooting. This will rule out a certificate issue.
    Next thing would be your reverse proxy. Are you using ISA server? Test the reverse proxy rule by browsing to the Lync mobile auto discover URL - https://lyncwebexternal.domain.com/Autodiscover/AutodiscoverService.svc/root
    Assuming ISA also make sure the rule is configure correctly - 
    http://technet.microsoft.com/en-us/library/hh690011.aspx
    http://blogs.technet.com/b/nexthop/archive/2012/11/19/configuring-reverse-proxy-for-lync-server-2010-mobility.aspx
    Let me know what the results are of those tests.
    Andrew Morpeth
    Lync Server Specialist - Auckland, NZ
    Check out my blog

  • EAP-TLS Certificate Key Size

    Hi,
    I'm in the process of setting up EAP-TLS authentication in my network. I have installed 2048 bit certificates on my ACS server and Client. When attempting to authenticate I receive the following message in ACS: EAP-TLS or PEAP authentication failed during SSL handshake.   
    Is anyone using 2048 bit certs or know if they work? Any suggestions what else might be causing the authentication failure?
    Thanks,              

    2048 bit is the standard these days. I have used 2048 bit with both PEAP and EAP-TLS with no issues. The error might be the shared secret between ACS and the WLC.
    Sent from Cisco Technical Support iPhone App

  • How to install EAP-TLS certificate?

    Hi All,
    Our wireless network requires EAP-TLS certificate installation.
    We use a MS 2003 server as a CA server.
    I tried to brows to the issuing website (http://CAserver/certsrv) but when I get to the section where I need to choose the strength of the key, somehow the phone's browser is not showing the options...
    So, I tried to issue a certificate from the issuing station and got a file called certnew.cer .
    From what I read this is the right certificate type, so I copied the file to the phone and tried to open it...
    But it only open it with the Notes application...
    Any help????
    10x in advanced,
    Naor. 

    The certificate needs to be in .der format. You probably have it in .cer (PEM) format right now.
    You can convert it using openssl. Change the filenames appropriately:
    openssl x509 -outform der -in MYCERT.pem -out MYCERT.der 
    Then send the .der file to the phone and open it. The phone should offer to install it as a certificate.
    Message Edited by sanjaymehta on 06-Aug-2009 09:22 PM
    Message Edited by sanjaymehta on 06-Aug-2009 09:23 PM
    Sanjay Mehta
    Motorola "Brickphone" circa 1996, Alcatel One Touch, Ericsson R380, Sony Ericsson T220, Sony Ericsson T630, Nokia E50, Nokia E61i, Nokia 9300i, Nokia E71,Nokia X6, Google Nexus S, iPhone 4S

  • Cannot install configuration profiles using iphone configuration utility, why?

    I have several working configuration profiles, which I can distribute both via email and a website.
    I'd like to install the profiles through the iPhone Configuration Utility, but I am not able to do so. The devices show up just fine in the list. When I choose the Configuration Profile tab and clicking the install-button on a profile (which will install fine via Email or website) in the list, nothing happens. Regardless of the device beeing out of the box, or activated via iTunes. What am I missing?
    I have tried this on several iPad and iPad 2 devices with the latest (4.3.3) firmware installed.

    Hi,
    I have the same problem. After creating profile with only General tab being set up it is failing to install on my iPad.
    Profile installation failed
    The profile could not be added to device
    Any suggestions?
    I even erase all content and setting but that didn't help either.
    The only alarming thing is that in my Certificate section I have red message:
    "This certificate was signed by and untrusted issuer"
    Can that effect installation?
    If that is the case how to fixed it?
    P.S. iPad was purchased from Apple Store.
    Regards,

  • Multiple from e-mailaddresses /  one account / iphone configuration utility

    I trie to configure my e-mail account on my iphone. This works fine, when there is one e-mailaddress per account. But when I want to configure it to have multiple from-e-mailaddresses aka aliases I can choose to sent my mail from, there I stuck.
    What I tried till now but without any success is
    use the "name1 <[email protected]>, name2 <[email protected]>" syntax
    leaf it blank and do it manually when the profile is installed, what works, but still just for one e-mailaddress
    who could help?

    thx for your answer
    at the provider end every thing is configured the way it should
    you know the way to configure other e-mail-addresses in iOS manually:      Preferences > Mail, Contacts, Calendar > yourMailAccount > yourMailAccount > E-Mail yourEMailAddress
    There you can put in your aliases, which enables you to select, from which address you send your e-mail from
    the same thing you can do in Apple Mail, with the "name1 [email protected], name2 [email protected]" syntax entered in the Email Address field in Account Information in the preferences
    But what to do, if you want to configure your iPhone with the iphone configuration utility?
    if you leaf the from-address blank, you can enter just one address, the above mentioned syntax, that works for Apple Mail, doesn't
    And the question for the super hero out there: How to do this in addition with certificates?

Maybe you are looking for

  • Weblogic Server 6.1 as Windows NT Service

    Hi All, I am running Weblogic Server 6.1 as Windows NT Service with one WAR Application Deployed in Production Mode. My machine is on Windows 2000 Application Server. I am facing a very strange problem with the setup. Prob 1 : Sometimes the service u

  • Reading a text file with foreign language characters

    I'm trying to convert foreign language characters to English looking characters.  I have code that works, but only if I hard code the string with foreign language characters and pass it to the function. I cannot figure out how to get my program to re

  • Group Consolidation Error

    HI Experts, I had run a consolidation package sucessfully. But the problem i am facing currently is that when i open my evdre and check the trial balance my group consolidation shows a difference i.e balance sheet does not get tally. The difference i

  • In Max, click Test Panel - Get Executable version (7.1.1) doesn't match resource file (7.1)

    Hi, I haven't used LabVIEW for a while. I plugged in a USB-6251 and ran Measurment and Automation explorer and saw that the USB-6251 was in the NI-DAQmx Device and was green. I clicked on the Test Panels button and got a window with the message: Get

  • Ask Q about u400 and u510.

    hi my friends i want to know u400 is a good laptob???  usb3 and optical drive is important for me how about u510 ?? can i buy it from dubai???? it came in september 2012 plz help me   shall i wait for u510 or buy u400??