Radius certificate problems...

Hello,
I am using AirPort Extreme's with Radius configured in Mac OS X Server 10.6. Authenticating works, but only with a certificate error on the clients. So I purchased a certificate and installed it (including the intermediate certificate in the System Keychain. But I keep getting a certificate error, on my iPhone for example I get a display with: "Not Verified", however in the server Certificates page it says: "This certificate is valid". When I use the same certificate on the Web service with SSL, there seems to be no problem at al. See http://www.sslshopper.com/ssl-checker.html?hostname=api.serverdensity.com#hostna me=core.hondsrugcollege.nl
+I tried several certificates: Comodo, Thawte and now GeoTrust. Neither worked, with Radius. Not with iPhone, not with Windows clients. With Windows clients I got this error when connecting via Radius:+
+The Credentials provided by the server could not be validated. We recommend that you terminate the connection and contact your administrator with the information provided in the details. You may still connect but doing so exposes you to security risk by a possible rogue server.+
+Radius Server: core.hondsrugcollege.nl+
+Root CA: GeoTrust Global CA+
+The server "core.hondsrugcollege.nl" presented a valid certificate issued by "GeoTrust Global CA", but "GeoTrust Global CA" is not configured as a valid trust anchor for this profile. Further, the server "core.hondsrugcollege.nl" is not configured as a valid NPS server to connect to for this profile.+
What should I do to troubleshoot this?
Message was edited by: Cybex

One of the key terms I can see in your post is 'Trust Anchor'. Have a search around about this and it may just shed some light.
In a windows wireless client setup using 802.1x you may notice a screen in the wireless profile setup with a tick box saying 'Validate Server Certificate'. Underneath there you need to select the Trusted Root Authority certificate to use to validate the certificate you have installed. There must be something similar in MacOS and iOS. Alternatively you could untick the 'validate...' check box and the problem should go away, but you are likely reducing security by doing this.
Sorry i cant help with specifics but hopefully I've pointed you in a direction that can solve the issue.
Message was edited by: AdventureMatt
Message was edited by: AdventureMatt

Similar Messages

  • Error message trying to install Adobe Download Assistant (Sorry an Error has occured... certificate problem)

    I am trying to download the free trial of Acrobat XI. I am using an iMac running Mac OSX 10.6.8. When I click on the Installer I have downloaded for Adobe Download Assistant, it gives me the following error message while trying to open/install the Download Assistant:s
    Sorry, an error has occured.
    The application cannot be installed due to a certificate problem. The certificate does not match the installed application certificate, does not support application upgrades, or is invalid. Please contact the application author.
    Can anybody help?

    Lmslugo please move your current installation to the trash can, empty the trash, and reinstall.  This should give you a new copy of the application with a current certificate.

  • Adobe Air Certificate problem

    I get the following error message when I try to use any of my applications that use Adobe Air: 
    The application cannot be installed due to a certificate problem.  The certificate does not match the installed application certificate, does not support the application upgrade, or is invalid. Please contact the application author.

    Have you tried creating new certificate for the app?

  • Adobe AIR 3 Performance Issues and Code Signing Certificate Problem

    I recently updated to Adobe AIR 3.0 SDK (and runtime) doing HTML/Javascript development using Dreamweaver CS5.5 in a Windows 7 Home Premium (64 bit).
    The AIR app I'm developing runs well from within Dreamweaver. But when I create/package the AIR app and install it on my machine:
    1. The app literally CRAWLS running it in my Windows 7 12G RAM machine (especially when I use the mouse to mouse over a 19-by-21 set of hyperlinks on a grid) --- IT IS THAT SLOOOOWWWW...
    2. The app runs fine in my Mac OS X 10.6.8 with 4G RAM, also using the Adobe AIR 3 runtime.
    About the Code Signing Certificate problem:
    When I try to package the AIR app with ADT using AIR's temporary certificate feature, I get the error message "Could not generate timestamp: handshake alert: unrecognized_name".
    I found some discussions on this problem in an Adobe AIR Google Groups forum, but no one has yet offered any resolution to the issue. Someone said Adobe is using the Geotrust timestamping service --- located at https://timestamp.geotrust.com/tsa --- but going to this page produces a "404 --- Page not found" error.
    The Google Groups Adobe AIR page is here:
    http://groups.google.com/group/air-tight/browse_thread/thread/17cd38d71a385587
    Any ideas about these issues?
    Thanks!
    Oscar

    I recently updated to Adobe AIR 3.0 SDK (and runtime) doing HTML/Javascript development using Dreamweaver CS5.5 in a Windows 7 Home Premium (64 bit).
    The AIR app I'm developing runs well from within Dreamweaver. But when I create/package the AIR app and install it on my machine:
    1. The app literally CRAWLS running it in my Windows 7 12G RAM machine (especially when I use the mouse to mouse over a 19-by-21 set of hyperlinks on a grid) --- IT IS THAT SLOOOOWWWW...
    2. The app runs fine in my Mac OS X 10.6.8 with 4G RAM, also using the Adobe AIR 3 runtime.
    About the Code Signing Certificate problem:
    When I try to package the AIR app with ADT using AIR's temporary certificate feature, I get the error message "Could not generate timestamp: handshake alert: unrecognized_name".
    I found some discussions on this problem in an Adobe AIR Google Groups forum, but no one has yet offered any resolution to the issue. Someone said Adobe is using the Geotrust timestamping service --- located at https://timestamp.geotrust.com/tsa --- but going to this page produces a "404 --- Page not found" error.
    The Google Groups Adobe AIR page is here:
    http://groups.google.com/group/air-tight/browse_thread/thread/17cd38d71a385587
    Any ideas about these issues?
    Thanks!
    Oscar

  • Cannot open install assistant.  I get this error message: The application cannot be installed due to a certificate problem.  The certificate does not match the installed application certificate, does not support application upgrades, or is invalid.  Pleas

    How can I downloade a trial of Adobe Elements 12? 
    I followed the instructions to download assistant...but get this message: The application cannot be installed due to a certificate problem.  The certificate does not match the installed application certificate, does not support application upgrades, or is invalid.  Please contact the application author.

    Hi alposer,
    Please remove the copy of the Adobe Download Assistant you currently have installed and then reinstall the Adobe Download Assistant.
    Regards,
    Rave

  • Certificate Problem--can't install

    I am trying to install Creative Cloud trial version on my Mac. I get this message:  The application cannot be installed due to a certificate problem.  The certificate does not match the installed application certificate, does not support application upgrades, or is invalid.  Please contact the application author.
    There is no error number

    Kulerkween can you please post a screenshot of the error message?  Also what operating system are you using?

  • Certificate problem--safari says it couldn't establish a secure connection.

    Certificate problem. How do I fix a corrupted cert? I think what's going on is that the cert that is installed for this site is bad. But Safari just gives an error and I can't find a way to remove the bad one and add a new one? Can anyone help me?

    I haven't experienced any issues like this.
    What's a corrupted certificate?

  • Windows certificate problem - at least for a better description

    I'm not sure where this should be posted.  I believe it's actually a Windows problem, so i'll try here first.
    Okay, I was installing SQL 2012 express server and I ran into a problem during the installation.  It's been too long ago, and too many correction attempts since to remember what the original problem even was.  But, anyways I uninstalled the installation
    and tried again, and again and again.   I was getting these errors:   Well damn, I've uninstalled my latest attempt and the error logs are gone.  Anyways it was failing on a certificate issue and then unable to find a start-up handle for the
    database engine. After this I tried all of the suggested fixes put forth on msdn,  Stack OverFlow and several blogs, nothing worked.  One of the suggestions was to create a new account/profile and try installing with that account. At that point I
    discovered that I couldn't create a functional new profile; every one failed when trying to log in.  That's why I think it is a Windows 8.1 problem and not a SQL installation problem, although it's likely that created the original problem. Anyways, I'm
    stuck.  Any ideas, beyond re-installing (I'll probably wait for the April 8th update and see if that happens to fix the problem before suffering the inconvenience of a complete re-install) win 8.1?  I can recreate the error logs by going through
    the installation again if they could help or I can pull the logs from one of the other blogs.
    Thanks,
    Ray

    After more digging around I found another instance of this problem reported here:
    http://social.technet.microsoft.com/Forums/en-US/43cb5946-9d82-4973-b8a1-4053aa688ba8/user-profile-service-failed-the-signin-user-profile-cannot-be-loaded-for-any-new-accounts?forum=w8itprogeneral
    ( it won't let me post a link, so we get plain text)
    As suggested in the mentioned post, checking my Event Viewer showed basically two type of Errors:  Event ID 1500 when trying to log in to Windows 8.1 with the newly created profile or creating a new profile; and Event ID 1511 when trying to install
    SQL 2012 Server Express.  Later on in the error logs, errors with certificates are mentioned.  Further digging showed that in each case the errors occurred when an attempt was made to copy files from the Default profile, specifically files in the
    \AppData\Local\Microsoft\VSCommon folder, to a Temp folder during creation of the new profile.  I copied these files to another temp folder and removed them from the offending location. After doing so, SQL 2012 Server Express installed properly and I
    was able to create a new user profile which could log into Windows.  I haven't seen any other problems since the files were removed, VS2013 works fine, but it did before these issues popped-up too. (VS2012 was upgraded several months ago, so maybe the
    files were left from that?).
    Hope this might help others who run into certificate problems when creating profiles, either during installation of programs or when creating a new user profile.

  • There is a problem with this connection's security certificate The remote computer cannot be authenticated due to problems with its security certificate. Security certificate problems might indicate an attempt to fool you or intercept any data you send

    Hi,
    I have this Windows 2008 R2 on which I installed remoteapp some years ago.
    Now the certificate expired and I get the message
    "There is a problem with this connection's security certificate
    The remote computer cannot be authenticated due to problems with its security certificate.
    Security certificate problems might indicate an attempt to fool you or intercept any data you send to the remote computer."
    How should I renew the certificate? I already went to certification store and tried to renew certificate with same key but then it says "the request contains nor certificate template information".
    Please advise.
    J.
    J.
    Jan Hoedt

    Does the computer account have Enroll permission to the certificate template?
    From the Server running your CA, run mmc, click File then Add/Remove Snap-in...
    Add Certificate Templates and click OK.
    Find the certificate template, then right click and select properties.  On my CA its call ed RemoteDesktopComputers but might be called something different depending on what what template your certificate is based on.
    On the security tab, click Oblect types, check Computers then OK. Enter the Computername and click OK.  Then give your computer account Enroll permisssion.
    HTH,
    JB

  • OS X Safari and Hotmail Certificate Problem

    Hello Apple discussions,I Am having problems accessing part of a microsoft hotmail account which explains below
    I Have a problem with my hotmail Web account Using OS X 10.6.4 Safari 5.0 when I Try adding another email account to my hotmail account where it says: Add an e-mail account on the left side pane of hotmail. when I Click on Add an e-mail account I Get the error message for a Certificate problem: safari cannot verify the identity of the website ¨col0-sec.mail.live.com¨ I Am using OS X 10.6.4 and Safari 5.0. I Have tried using a earlier version of safari but the same problem occurred so I Tried using Google Chrome (most recent) and Opera Browsers for MAC and with no luck, the exact same problem. so I Tried adding an email account using a windows xp machine, it had no problem adding an email account so the problem seems to be OS X problem. It seems to be something wrong with the certificate for validation on the Microsoft website I Think.I Can send a screen shot of the entire message that popped up for the invalid certificate if needed to fix this problem.

    Thought of something else you might try.
    Open Keychain Access (Applications/Utilities) Select "My Certificates" or on the left.
    If you see a Microsoft/Hotmail certificate, double click that. Click the gray disclosure triangle so
    it faces down. Click the pop up menu next to: When using this certificate and set it to: Always Trust.
    Relaunch Safari and try logging into your Hotmail account.
    Carolyn

  • I'm having website certificate problems.

    Recently, when I try to purchased anything on eBay, a box pops up stating:
    "The certificate for this website was signed by an unknown certifying authority. you might be connecting
    to a website that is pretending to be checkout.payments.ebay.com....."
    Is there something i can do about this? For now, I use Firefox and don't have any certificate problems but
    I'd prefer to use Safari.
    Thanks
    jt

    This question has nothing to do with iBooks, nor anything to do with OS X Server — this question is really getting bounced around the forums, too! — and probably nothing to do with the particular web browser you're using.
    This is either something weird with local DNS or the host you're connecting to (that would be bad), or something weird with the certificate being presented by the eBay web site you're accessing:
    Launch Terminal.app from Applications > Utilities and issue the command
    dig +short checkout.payments.ebay.com
    Here's an example of what that command looks like, with the $ prompt and with the output shown before the next $ prompt:
    $ dig +short checkout.payments.ebay.com
    66.211.180.57
    66.135.215.197
    $
    I've posted the two IP addresses that I get from that command.
    If you get those two addresses, it's probably eBay's error. 
    If not, post what you get for IP addresses.
    If you don't get anything output from the command, or if you get something different from those two hosts, you might have an issue with your local DNS setup.

  • Radius certificate

    Is there a method for adding a radius certificate without using profile manager?
    I used to under System Preferences:Network:802.1x be able to hit a plus sign and add a system or login cert.
    Plus button is gone
    Thanks,
    Ben

    I don't know that OD would help, I have od set-up and radius working on my 10.6 clients to our new lion server as was. I can't get brand new lion clients to work. Worse yet upgraded lion clients work fine.
    Another admin set-up a wifi network profile  to use with the profile manager. It has the wrong settings and I can't seem to figure out how to remove the erroneous wifi network.

  • I need help, pop up about Certificate Problems and facebook wont work

    i keep getting a pop up about Certificate Problems on every page, i just updated my soft ware and i cannot go on facebook.

    Trouble Shooting and related keyboard commands:
    Startup Manager: How to select a startup volume
    Mac OS X: Starting up in Safe Mode
    Resetting your Mac's PRAM and NVRAM
    "To continue booting, type 'mac-boot' and press return" Message
    Resetting Cuda/PMU on Power Mac G5, Power Mac G4, Power Macintosh G3
    Resolve startup issues and perform disk maintenance with Disk Utility and fsck
    Mac OS X 10.4, 10.5: Gray screen appears during startup
    Mac OS X 10.4 Help: I see a blank blue screen when I try to start up my computer
    Avoid unnecessarily resetting the SMC or PMU for troubleshooting purposes
    Note: There is NO magic time required to clear the PMU. A firm, complete push is all that is required.
    The PMU reset button is a momentary contact switch because the reset only requires momentary contact.
    Another myth is that more than 2 chimes during a PRAM reset resets better.
    A reset is a reset.
    If you need more than is done in a PRAM reset after 2 chimes, use the NVRAM reset in Open Firmware.
    Keyboard Shortcuts:
    Mac OS X keyboard shortcuts
    Keyboard shortcuts - Mac Guides
    Keyboard shortcuts in OS X | creativebits
    Mac OS X Keyboard Commands
    what does "DOS" mean ??  " boot in to DOS ", as you used it ??
    Disk Operating System
    That would be "DOS like" as in like the screen that you use in booting a Windows machine.
    It's the black with white text screen that you get when you boot to Open Firmware (CMD+OPT+O+F)
    Booting Mac OS X

  • The application cannot be installed due to a certificate problem.  The certificate does not match

    the application cannot be installed due to a certificate problem.  The certificate does not match the installed application certificate, does not support application upgrades, or is invalid.  Please contact the application author.
    i DONT HAVE THE DISK FOR aDOBE 6.0 ANYMORE HOW DO i UPGRADE??

    You cannot in any case buy an upgrade from Acrobat 6, it is too old. So it's a full price purchase I'm afraid.

  • Safari client certificate problem w/ Canada Post website

    I am using OSX 10.8.5 and Safari 6.1.1
    I'm trying to use the Canada Post website for online shipping (ship-in-a-click) via the site:
    http://www.canadapost.ca/personal/tools/cst/intro-e.asp
    When I choose my option (in this case INTERNATIONAL) a pop-up opens asking to select a client certificate. A list of five certificates, which are all apparently valid and not expired, is given. No matter which certificate I select I cannot get past this pop up window. It just pops back up again.
    The certificates are all in the form:
    com.apple.idms.appleid.prd. then a very lengthy alpha numeric string
    From what I have read with certificate problems you can just delete them and next time you visit the site will ask you to select a new one. However, in this case, with all the certificates seemingly being valid, I don't think that will be the solution. Although, I am a complete novice when it comes to these issues.
    Can anybody suggest something other than using Firefox/Chrome etc. although if that is the ONLY choice then so be it. But surely this can be solved within Safari, no? The rest of the Canada Post site seems to behave OK with Safari.
    Thank you.

    Neither.  I am on Mavericks and it shows the exact same issue, so it neither fixes the problem or intoduces new ones, at least with my site.
    I also noticed that it is somewhat based on the loction (IP) of the server because on my local laptop (During development) and on our QA server would try and send a certificate that it should not send.  HOWEVER once we implemented the SSL client certificate on our production server it would no longer send the certificate.  I have no idea why and speculate that it is because our production server has a public IP.
    If you want you can use my site and see if the problem persists for you there (http://whf.to); however given the seemingly random why Safari decides to send certificates you may or may not see the issue.  If Safari does indeed send a certificate you should get an error page that details what happened (in somewhat lay-terms).
    Sorry that Mavericks doesn't fix the issue for you.

Maybe you are looking for