Mobile safari no longer able to authenticate with client certificate in ios 5...

was working in 4.3.5 on iPad, but no more. Imported the cert with ipcu but Safari seems to not recognize that there is a cert installed. All certs are using sha1

Some additional info - the imported certificate works fine for Activesync, VPN, and WiFi, so I know it is installed correctly. When connecting to a web server that requires the certificate, the following is logged in the IPCU console:
MobileSafari[368] <Warning>: no itentities, but we have a challenge <NSURLAuthenticationChallenge: 0x2eeea0>
So to me, it looks like the Web server is requesting the client certificate, but mobilesafari does not see the identity certificate I imported.

Similar Messages

Changed our ASA IP address and we're no longer able to Authenticate with RSA.

Hi,
We changed our ASA IP last night and since then we can no longer authenticate with RSA. I know we had to modify the IAS policy on our DC to the new IP but I'm not sure where I would change that in RSA. Any one have an idea?
ASA 5510 (8.3)
RSA (6.1)
Thanks.

I don't have
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
> Programs > RSA ACE Server
I have the following...
RSA Authentication Manager Configuration Tools > RSA Authentication Manager
RSA Authentication Manager Configuration Tools > Configuration Management
RSA Authentication Manager Configuration Tools > Replica Management
RSA Authentication Manager Database Tools > Compress
RSA Authentication Manager Database Tools > Dump
RSA Authentication Manager Database Tools > Load
RSA Authentication Manager Control Panel
RSA Authentication Manager Host Mode
RSA Authentication Manager Log Monitor
RSA Authentication Manager Remote Mode
RSA Security Center
Where would I find the configuration from those items?

HT1338 when I try to print, I get this error message "Communications Failure: The computer is no longer able to communicate with your printer. " followed by intruictions to turn off the printer and check connections etc. I am using an HP Officejet 6500 70

when I try to print, I get this error message "Communications Failure: The computer is no longer able to communicate with your printer. " followed by intruictions to turn off the printer and check connections etc. I am using an HP Officejet 6500 709e, connecter wirelessly

I'm using a mac (OS X - snow leopord) and am printing over the network (wirelessly).
HP Photosmart Premium Fax All in One - C410a
I was only able to print one page and then both my printer and my computer would display an error message about the printer's inability to print. Since then I've been able to resolve my specific problem.
I
1. uninstalled HP from my computer (checked to ensure that my printer was no longer visible in my printers and the HP Utility software was nowhere to be found),
2. grabbed the software/driver update from Aug, 2010,
3. installed the Aug, 2010 update, and my problems seem to have been fixed.
This is where I got my 2010 update from (obviously you should get the driver/software applicable to your OS and specific printer):
http://h10025.www1.hp.com/ewfrf/wc/softwareDownloadIndex?softwareitem=mp-85379-1&cc=us&dlc=en&lc=en&...

Communication Failure: The computer is no longer able to communicate with your printer.

Hello, I have a HP Officejet J6480 All-in-One printer. When I try to print, I receive this error message:
"Communication Failure: The computer is no longer able to communicate with your printer. Turn the printer off, check your printer connections and check for printer errors, and turn the printer back on."
I am using a Mac PowerBook G4, OS v10.5.7. I have tried the following:
-- rebooted my Mac
-- turned printer off/on
-- rebooted wireless router
-- tried to print using USB cable.
I continue to receive the same error message. Helllllllllllllllp!!!!
A couple of other things I need to mention: I bought this printer in June and have been able to print just fine since purchasing
this printer. As recently as Friday, July 3, I was able to print and printed 6 or 7 pages then. This is CRAZY!!!!
Thanks.
Barb
Message Edited by BarbNPhx on 07-05-2009 10:55 AM

I'm using a mac (OS X - snow leopord) and am printing over the network (wirelessly).
HP Photosmart Premium Fax All in One - C410a
I was only able to print one page and then both my printer and my computer would display an error message about the printer's inability to print. Since then I've been able to resolve my specific problem.
I
1. uninstalled HP from my computer (checked to ensure that my printer was no longer visible in my printers and the HP Utility software was nowhere to be found),
2. grabbed the software/driver update from Aug, 2010,
3. installed the Aug, 2010 update, and my problems seem to have been fixed.
This is where I got my 2010 update from (obviously you should get the driver/software applicable to your OS and specific printer):
http://h10025.www1.hp.com/ewfrf/wc/softwareDownloadIndex?softwareitem=mp-85379-1&cc=us&dlc=en&lc=en&...

With ios 7, going to safari I am asked to authenticate with name and password

In trying to open safari I am asked to authenticate with ID and passsword. Which ID and passeord? Why was this not asked in ios 6?

That didn't work. Top of screen says "Authentication Required"
192.168.1.1
I used the icloud ID and password, got nada. Could it be related to my modem?
Brooks

Genius no longer able to function with certain songs

A couple of months ago I noticed that Genius was no longer able to work with certain songs that it had previously generated playlists for.
If this were for little known artists then I could understand, but it is unable to generate playlists for ACDC - Highway to ****, and other 'big' artists.
Does anyone have any ideas?

A couple of months ago I noticed that Genius was no longer able to work with certain songs that it had previously generated playlists for.
If this were for little known artists then I could understand, but it is unable to generate playlists for ACDC - Highway to ****, and other 'big' artists.
Does anyone have any ideas?

Visual Studio 2012 is no longer able to interact with any TFS server

I can connect to the on-premise TFS2012 server using the instance of VS2012 installed on the server machine as well as the instance of VS2012 installed on a coworker's machine.
I was able to interact with TFS2012 using the instance of VS2012 installed on my Win7 x64 machine, but only one time. Many reboots later, both of the server itself and my machine, I haven't been able to get VS2012 to interact properly with TFS.
When I click on "Team" and select "Connect to Team Foundation Server", the "Team Explorer" VS window opens. In that window, no matter what button or link I click on, Visual
Studio won't connect to TFS or allow me to choose a TFS server.
1. Clicking on the Home icon takes me to page with two buttons: Pending Changes & settings.
Clicking on "Pending Changes" takes me to a page where I can do 3 things: click on "no workspace" (nothing happens), click on Actions -> Open Source Control Explorer (which opens an
empty Source Control Explorer Window, from which I can do nothing), click on "Settings", which shows me a page with 4 options:
Security: clicking it results in the message "Team Foundation Error. Object reference not set to an instance of an object"
Group Membership: clicking it results in the message "Team Foundation Error. Object reference not set to an instance of an object"
Source Control: clicking it results in the message "Value cannot be null. Parameter name: serverName"
Process Template Manager: clicking it results in the message "Value cannot be null: Parameter name: tpc"
2. Clicking on the "Connect to Team Projects" icon takes me to a page where I can click on either:
"Configure Team Projects": clicking it does nothing
"Connect": clicking it does nothing
"Sign Up": opens a Visual Studio Online page on my web browser
If I instead go to File -> Source Control -> Advanced, there is only one option which appears to be working:
Change Source Control. When I click on it I get a window with a table with rows that correspond to the current solution and the projects in the current solution. ie:
Solution/Project: {item name}
Server Name: "<No Server>"
Server Binding: "<No Server>"
Connected: {gray uncheckable checkbox}
Status: "Not Controlled"
Local Binding:
Provider:
Relative path:
The buttons "Connect", "Disconnect", "Browse" are disabled. Clicking on the "Bind" button results in a window with the message "The mappings
for the solution could not be found" and two buttons: Ok and
Help. Clicking on Help results in a white window with the message:
"The 'EurekaPackage' package did not load correctly. The problem may have been caused by a configuration change or by the installation of another extension. You can get more information by examining the file 'C:\User\<username>\AppData\Roaming\Microsoft\VisualStudio\11.0\ActivityLog.xml'.
Continue to show this error message?"
Clicking "yes" open the following page on my web browser, which essentially tells me to go back to the "Change Source Control" window and unbind the project, which VS is not letting me do:
http://msdn.microsoft.com/query/dev11.query?appId=Dev11IDEF1&l=EN-US&k=k%28vs.tfc.sourcecontrol.MessageConnectionManagerCantBind%29;k%28TargetFrameworkMoniker-.NETFramework
The following is an excerpt from the "ActivityLog.xml" file mentioned in the white window that appeared when I clicked on the "Help" button:
<entry>
    <record>651</record>
    <time>2013/12/20 13:35:53.354</time>
    <type>Information</type>
    <source>Profile manager</source>
    <description>Begin export of category 'Source Control_TeamFoundation' ({2A718788-A6D9-44C5-90EF-438BF5B06A74}) from package 'Microsoft.VisualStudio.TeamFoundation.VersionControl.HatPackage, Microsoft.VisualStudio.TeamFoundation.VersionControl, Version=11.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a' ({4CA58AB2-18FA-4F8D-95D4-32DDF27D184C}). 3349472 KB of virtual memory currently available.</description>
</entry> <entry>
    <record>652</record>
    <time>2013/12/20 13:35:53.354</time>
    <type>Information</type>
    <source>Profile manager</source>
    <description>End export of category 'Source Control_TeamFoundation' ({2A718788-A6D9-44C5-90EF-438BF5B06A74}). 3349472 KB of virtual memory currently available.</description>
</entry>
<entry> <entry>
<record>664</record>
<time>2013/12/20 13:48:51.961</time>
<type>Error</type>
<source>VisualStudio</source>
<description>CreateInstance failed for package [Microsoft.Data.Entity.Design.BootstrapPackage.BootstrapPackage, Microsoft.Data.Entity.Design.BootstrapPackage, version=11.2.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a]</description>
<guid>{7A4E8D96-5D5B-4415-9FAB-D6DCC56F47FB}</guid>
<hr>80070002</hr>
<errorinfo>Could not load file or assembly 'Microsoft.Data.Entity.Design.BootstrapPackage, Version=11.2.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a' or one of its dependencies. The system cannot find the file specified.</errorinfo>
</entry>
<entry>
<record>671</record>
<time>2013/12/20 13:50:19.757</time>
<type>Information</type>
<source>VisualStudio</source>
<description>Entering function CVsPackageInfo::HrInstantiatePackage</description>
<guid>{E8B06F41-6D01-11D2-AA7D-00C04F990343}</guid>
</entry>
<entry>
<record>672</record>
<time>2013/12/20 13:50:19.757</time>
<type>Warning</type>
<source>VisualStudio</source>
<description>Unexpected system error mode before loading package [Visual Studio Web Browser Package]</description>
<guid>{E8B06F41-6D01-11D2-AA7D-00C04F990343}</guid>
</entry>
<entry>
<record>676</record>
<time>2013/12/20 13:50:19.820</time>
<type>Information</type>
<source>VisualStudio</source>
<description>Entering function CVsPackageInfo::HrInstantiatePackage</description>
<guid>{8C28E535-ABC9-4F92-B5C9-6C16617C8884}</guid>
</entry>
<entry>
<record>677</record>
<time>2013/12/20 13:50:19.820</time>
<type>Warning</type>
<source>VisualStudio</source>
<description>Unexpected system error mode before loading package [EurekaPackage]</description>
<guid>{8C28E535-ABC9-4F92-B5C9-6C16617C8884}</guid>
</entry>
<entry>
<entry>
<record>679</record>
<time>2013/12/20 13:50:19.820</time>
<type>Error</type>
<source>VisualStudio</source>
<description>CreateInstance failed for package [EurekaPackage]</description>
<guid>{8C28E535-ABC9-4F92-B5C9-6C16617C8884}</guid>
<hr>80070002</hr>
<errorinfo>Could not load file or assembly 'file:///C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\Extensions\Microsoft\Web Tools\Eureka\Microsoft.VisualStudio.Web.Eureka.dll' or one of its dependencies. The system cannot find the file specified.</errorinfo>
</entry>
<entry>
    <record>559</record>
    <time>2013/12/20 14:30:48.880</time>
    <type>Error</type>
    <source>VisualStudio</source>
    <description>Could not convert file time to system time</description>
    <hr>80070057 - E_INVALIDARG</hr>
</entry>
</activity>
What, if anything, can I do in order to be able to get Visual Studio 2012 to interact with TFS?

I'll add that when I run devenv.exe with the flag /TFSLink, VS opens a Team Explorer window that contains the following text:
An exception was encountered while constructing the content of this frame. This information is also logged in "C:\Users\<username>\AppData\Roaming\Microsoft\VisualStudio\11.0\ActivityLog.xml".Exception details:System.NullReferenceException: Object reference not set to an instance of an object.   at Microsoft.VisualStudio.Shell.Interop.IVsShell5.LoadPackageWithContext(Guid& packageGuid, Int32 reason, Guid& context)   at Microsoft.VisualStudio.Platform.WindowManagement.WindowFrame.GetPackage()   at Microsoft.VisualStudio.Platform.WindowManagement.WindowFrame.ConstructContent()

IOS 4.3 upgrade breaking ActiveSync profiles with client certificates

After upgrading iOS iPhones from 4.2 to 4.3 they are unable to authenticate to ActiveSync. The ActiveSync profiles on the phones have a client certificate associated with them and the ActiveSync server requires client certs for authentication. I am also unable to remove the profiles from the iphone that include the client cert/activesync profile.
Anyone else experiencing this problem. I am 3 for 3 so far, all three have the same issue. I have only been able to get around the issue by restoring a 4.2 backup which enabled me to remove the profiles and install new ones.

Hi all,
Apple have come back to us about the case we opened.
In our profile we have two payloads configured, the activesync payload (with a user certificate) and the credentials payload which has a user certificate and our enterprise root certs.
The Apple engineers are saying the issue is the user cert in the Credentials payload. Apparently in 4.3 they have made some changes here.
(when I say User cert I mean a certificate with a usage of client auth, and also in our case we have the users UPN in the subject line (or you can enter it as a SAN), so every user has a cert)
Apple say 4.3 upgrade should be Ok without this cert in the payload.
It will be tomorrow before I can test this.
But the thing is, we need that cert in there because we have extra security (cert auth) on some of our public mobile focused websites, i.e. the sites challenge for a certificate (and then challenge for credentials).
So we may have a work around (that requires new profiles loaded) but going forward we still need to see some sort of fix, i.e. no need to reload profiles (4.3.x ?).
I'll post here when I get more info ... and thanks to Jeremy at Apple for calling me yesterday and going through it, much appreciated.
Cheers,
Aengus

Project Server 2010 Web services access with Client Certificate Authentication

We switched our SharePoint/Project Server 2010 farm to use client certificate authentication with Active Directory Federation Services (AD FS) 2.0, which is working without issue. We have some administrative Project Server Interface (PSI)
web service applications that no longer connect to server with the new authentication configuration. Our custom applications are using the WCF interface to access the public web services.
Please let us know if it is possible to authenticate with AD FS 2.0 and then call
Project Server web services. Any help or coding examples would be greatly appreciated.

what is the error occurred when the custom PSI app connects?
can you upload the ULS logs here for research?
What is the user account format you specified in the code for authentication?
For proper authorization, the “user logon account” in PWA for the user needs to be changed from domain\username to the claims token (e.g.
'I:0#.w|mybusinessdomain\ewmccarty').
It requires you to manually call the UpnLogon method of
“Claims to Windows Token Service”. if (Thread.CurrentPrincipal.Identity is ClaimsIdentity)
{ var identity = (ClaimsIdentity)Thread.CurrentPrincipal.Identity; }
if (Thread.CurrentPrincipal.Identity is ClaimsIdentity)
var identity = (ClaimsIdentity)Thread.CurrentPrincipal.Identity;
Than you need to extract UPN-Claim from the identity.
Upload the verbose log if possible.
Did you see this?
http://msdn.microsoft.com/en-us/library/ff181538(v=office.14).aspx
Cheers. Happy troubleshooting !!! Sriram E - MSFT Enterprise Project Management

HTTPS connection with client certificate not working in spartan

Spartan does not show certificate for the user to select
when I click the https link.
The certificates (taken from a smartcard) are indeed present in the user CertStore.
It works with IE 11 and Chrome.
Has somebody any suggestions ?
Thanks.

in fact you are more using a reverse-proxy than a proxy since it is on the server part..
You have to put all the SSL server part on the reserve-proxy itself and not on the final RSS feed. Then, the reverse-proxy will authenticate your client and gets its certificate. After that, either this proxy will open a plain connection (no ssl) towards the RSS, or you can also open a ssl connection but this means you must create a client certificate for the proxy. It just depends on the security level you need, and I used this solution many times in professional hosting.
hope it helps !

Problem with client certificate based authentication

Hello.
We are developing an AIR application that uses client
certificates for authentication. We have written a simple test case
to show the problem.
<?xml version="1.0" encoding="utf-8"?>
<mx:WindowedApplication xmlns:mx="
http://www.adobe.com/2006/mxml"
layout="absolute">
<mx:Script>
<![CDATA[
import mx.controls.Alert;
private function responseHandler(): void {
Alert.show("Response received");
]]>
</mx:Script>
<mx:HTTPService id="exampleService"
url="https://www1.aeat.es/pymes1/pacargoi.html"
showBusyCursor="true"
result="responseHandler()">
</mx:HTTPService>
<mx:Button label="Send"
click="exampleService.send()"/>
</mx:WindowedApplication>
When we click on the button, it sends the request to the
protected page and then (if you have CA emitted certificates) the
dialog appears requesting the client certificate. And it works
fine.
But next time we click on the button, the dialog requesting
the client certificate appears again.
Is there a way to stop showing the dialog every time?
Any help would be very appreciated.
Thanks a lot for your support.
Paco.

I have just sent a Feature Request/Bug Report with the
following text:
"We are experiencing a problem using AIR with a server that
requires authentication via client certificate.
The dialog for selecting the client certificate appears every
time that the AIR application interacts with the server (not only
the first time).
Steps to reproduce bug:
1. Install Apache HTTP Server with SSL and require client
certificate in order to authenticate.
2. Develop an AIR Application that connects to this server
(HTTPService or RemoteObject have been tested with the same
result).
3. Every time that the AIR application connect to the
server, the dialog appears in order the user to select the client
certificate.
Results: This makes the AIR application unusable.
Expected results: The dialog requesting the client
certificate should appear the first time only."
Thanks,
Paco.

Proxy https connection with client certificate credentials

Hello, we are building a application like netvibes/iGoogle which allows users to have portlets with rss feeds in them. The portlets are all loaded using ajax and therefore, the RSS feeds must exist on the same domain as the portal. If they don't, you run into problems with cross-domain security issues with ajax. Usually to get around this you just proxy the connection on the server which is very simple with rss feeds that are exposed via http. We however have many feeds that are exposed via https. These feeds likely require a client certificate to authenticate them. Therefore, just doing a basic proxy (take the distant url and open a new connection on the server) won't work because it will build the new connection with the servers credentials and not the users.
Is there a way to build the connection on the server using the users credentials?? How can we proxy this connection over https?
If anyone has ideas, please let me know.
Thanks!

in fact you are more using a reverse-proxy than a proxy since it is on the server part..
You have to put all the SSL server part on the reserve-proxy itself and not on the final RSS feed. Then, the reverse-proxy will authenticate your client and gets its certificate. After that, either this proxy will open a plain connection (no ssl) towards the RSS, or you can also open a ssl connection but this means you must create a client certificate for the proxy. It just depends on the security level you need, and I used this solution many times in professional hosting.
hope it helps !

In iPad how to use webdav nab   with client certificate

I have created one webdav enable site in apple mac mini server using apache. The webdav site is secured with https as well as client certificate.
While browsing the website using safari/IE everything is working fine,but with ipad's webdav utility it is not working.Client cert is not picking up by webdav nav tool, although the client ssl cert is installed in ipad.

Hi Olek
I Have a working WebDAV setup with tomcat 6.0
the only problem is this only works on windows XP
anyway here is the code,
    <servlet>
    <servlet-name>webdav</servlet-name>
    <servlet-class>org.apache.catalina.servlets.WebdavServlet</servlet-class>
    <init-param>
      <param-name>debug</param-name>
      <param-value>0</param-value>
    </init-param>
    <init-param>
      <param-name>listings</param-name>
      <param-value>true</param-value>
    </init-param>
    
    <init-param>
      <param-name>readonly</param-name>
      <param-value>false</param-value>
    </init-param>
    <load-on-startup>1</load-on-startup>
</servlet>


<servlet-mapping>
    <servlet-name>webdav</servlet-name>
    <url-pattern>/*</url-pattern>
</servlet-mapping>put that in your web.xml file
and here is a basic example of how to use it in a jsp.
<%
String networkPath = request.getScheme() + "://" + request.getServerName() + ":" + request.getServerPort() + request.getContextPath() + "/";
%>
<body onload="document.getElementById('anchor').click();">
    <a id="anchor" href="<%= networkPath %>Temp/Test/file.doc" folder= "<%= networkPath/Temp/Test/">
           Open in Web Folder View
    </a>
</body>Hope this helps you

ACE 4710 - Continuing SSL Session Setup with Client Certificate Failures

Dears,
I have a Cisco ACE (image: c4710ace-t1k9-mz.A5_2_1.bin) configured for SSL termination with load balancing in addition to client authentication. I have a situation that require the ACE to pass expired client certificate currently deployed on some clients.
which is the best option from the following to apply using the authentication-failure command in parameter map SSL configuration mode.
- authentication-failure ignore [Only]
OR
- authentication-failure redirect cert-expired
OR
- authentication-failure ignore with authentication-failure redirect cert-expired
Appreciate your help

Dear Kanwalsi
To pass only cert-expired !!! what do you think to apply the following
parameter-map type ssl TEST
authentication-failure ignore
authentication-failure redirect unknown-issuer url http://TEST.com/sorry.html 302
authentication-failure redirect no-client-cert url http://TESt.com/sorry.html 302
authentication-failure redirect cert-has-signature-failure url http://TESt.com/sorry.html 302
authentication-failure redirect cert-other-error url http://TESt.com/sorry.html 302
authentication-failure redirect cert-revoked url http://TESt.com/sorry.html 302
authentication-failure redirect crl-has-expired url http://TESt.com/sorry.html 302
authentication-failure redirect crl-not-available url http://TESt.com/sorry.html 302

Troubles with client certificates in Windows Phone 8.1 WebViews

Hi,
I'm having difficulties using a client certificate in Windows Phone 8.1 WebViews.
My code works fine in my Windows 8.1 App but i get a WebErrorStatus=[CertificateIsInvalid] in WebView.NavigationCompleted in WP.
I'm using this code to import my certificate :
await CertificateEnrollmentManager.ImportPfxDataAsync(certificateBase64, certificatePassword, ExportOption.NotExportable, KeyProtectionLevel.NoConsent, InstallOptions.None, "MyClientCertificate");
I have no problem using this cert in HttpClient with either Windows 8.1 or Windows Phone 8.1.
I don't understand why it doesn't work with the WebView control only on Windows Phone.

Tried it with no success.
But I just found this : https://blogs.msdn.com/b/wsdevsol/archive/2014/07/31/programmatically-create-and-configure-a-client-certificate-for-use-in-your-windows-runtime-based-app.aspx?Redirected=true
With the note at the bottom:
Note: For Windows Phone 8.1, you need to attach the Client Certificate programmatically. For Windows, once you install the Client Certificate to the app container
store and do not attach the client certificate with the HttpClient request, the HttpClient class will automatically detect that there is a single certificate installed in the app container store and forward it to the server. However in the case of Windows
Phone 8.1, there is no such “automatic” selection of the certificate and one MUST provide the certificate programmatically.
Since there seems to be nothing to attach a custom HttpBaseProtocolFilter to a WebView, it doesn't seem possible atm.

Mobile safari no longer able to authenticate with client certificate in ios 5...

Similar Messages

Maybe you are looking for