Where's WPA2 ??

I'm trying to connect to our University wireless using my macbook pro. They use WPA2 security with EAP-TLS.
When I try to connect the airport dialog box only presents me with a greyed out "WPA Enterprise" security option and the 802.1X configuration is TTLS-PAP. Consequently, I cannot connect.
I thought WPA2 was built in. Why is it not an option for me? Is there some place I need to enable it on my macbook pro to have it available to my airport connection?
Thanks.

Thanks, your suggestion was helpful and I've narrowed it down to an odd certificate problem. Maybe you folks can help.
In my Keychain Access I had a certificate from .Mac called gregcook in the "My Certificates" section. I noticed when trying to manually configure a secure connection in Internet Connect, that was the only certificate option available. I deleted this certificate and was able to successfully connect to our Secure WAP2 network. It placed a new certificate in "Certificates" though it has a warning that it is not in the trusted root database. If I add back my personal .Mac certificate, it will try to use that to authenticate. Even if it is deleted, if I try to manually configure any 802.1X in Internet Config, I will get a WPA authentication failure.
I think if I can get my University certificate in keychain access to be in the "My Certificates" category rather than "Certificates", I could see it and set it up in Internet Config.
Any ideas? Thanks for the help.

Similar Messages

  • WPA2 still broken on my MacBook Pro

    I bought a MacBook Pro, and as of 10.4.7, WPA2 performance was poor.
    I bought Leopard and installed a FRESH copy. No upgrade.
    WPA2 performance is still POOR. I cannot visit many sites.
    All HTTPS sites timeout and fail.
    How do I get this fixed?

    I believe the bug exists in the fact that wpa2 cannot be chosen and locked in, but wpa2 does work. I use two different routers with only wpa2 authentication with AES encryption and my macbook pro can connect to both, flawlessly, no dropouts, no interruptions of any kind, both operating at 5Ghz with average 216mb/sec connection speed. I'm sure apple will get around to fixing the gui where wpa/wpa2 is chosen.

  • Cannot Wi-Fi Sync iPad; Appears to see iMac but iMac does not see the iPad

    Like many, I have upgraded my iPad (1st Gen) to iOS 5 and for the most part, it's been an easy transistion to learn the new features. However, I've not been able to overcome a Wi-Fi Sync issue.
    The iPad does recognize that it can Wi-Fi Sync with my iMac.
    When it was connected via cable, I had already selected the "Sync with this [iOS device] over Wi-Fi" Option in iTunes then clicked "Apply."
    Under Settings > General > iTunes Sync on my iPad, the "Sync Now" button is grey when I connect to an alternate Wi-Fi network in our house, but when I am on the same Wi-Fi network as my computer, through an Apple Airport Extreme Basestation, the "Sync Now" button becomes actively black as it if recognizes my iMac, but it does not show up under iTunes to sync.
    I connected the iPad to an alternate computer which is linked to iPhone running iOS 5 on the alternate Wi-Fi Network I spoke of earlier and through which we succesfully Wi-Fi Synced, but when my iPad was linked to this same computer (connected first by cable to enable "Sync with this [iOS device] over Wi-Fi" Option in iTunes first, it still would not show my iPad. And this time, not even my iPad would see the computer when on the same network, yet I could also see the iPhone mentioned which was upstairs.
    I have tried following the steps in this Help Page (http://support.apple.com/kb/TS4062) but without any change. The only thing I haven't followed to the letter is restarting my router. I did tell my Airport Basestation to restart via the Airport Utility.
    Has anyone else yet experienced this issue and been able to resolve it? Please share any insight.

    When one device can't see another via Bonjour, it suggests a problem with how the network or the devices are handling "multicast" packets. Handling multicasts is tricky on Wi-Fi. Is there any way you can temporarily plug the iMac into the LAN port of the base station via an Ethernet cable, and try the sync that way? If that works, then it's a clear indication of multicast problems on your network.
    Apple is usually very good about making sure multicasts work reliably on AirPort base stations and all Macs and iOS client devices. It would be interesting to know which generation of AirPort Extreme you have, what firmware version you're running on it, exactly which wireless security mode you're using (for instance, WPA2 "mixed mode", where both WPA2-style AES-CCMP and original WPA-style TKIP encryption are available, is trickier for multicasts because multicasts have to use a different cipher and key. "WEP TSN" is also tricky for similar reasons). Oh, and what you have your "multicast rate" set to on your base station.

  • AEBS doesn't work with Windows XP

    I started out with an AEBS
    connected to a network
    and with an Xserve that acts as a DHCP and Radius server.
    AEBS was therefore configured in bridge mode with Radius Wifi protection.
    My Macintoshes connect fine but none of the 10 PC's (XP SP3) get an IP-address.
    No firewall or anti-virus is installed on the PC's.
    After hours of troubleshouting
    I set the AEBS to factory default,
    turned on bridge mode and
    disabled Wifi protection.
    Every computer can connect.
    Then I turned on WPA/WPA2 (with personal key) only to find out the probem was not related to the Radius configuration at all.
    Signal strenght is maximum, the PC's connect but don't get an IP-address.
    Please help

    After some more testing the two problems above proved to be unrelated.
    *So now I'm back in a situation where:*
    *WPA/WPA2 personal works on both platforms.*
    *However WPA/WPA2 Enterprise only works on the Macs and not on the Windows XP stations.*
    Setting up Radius with the configuration assistant in OS X server Leopard was so straightforward it is hard to do it wrong.
    I've found several tutorials on the web for the XP-client-settings when ABS and Radius are used.
    I admit the first time I was asked for my credentials I might have misstyped my password,
    but now there's no way to get that dialog popup again and correct the problem.
    This is driving me crazy for days now.
    Below the entries from the airport log:
    Sep 02 11:30:41 Severity:4 Authenticating station 00:12:f0:52:2d:7f to RADIUS.
    Sep 02 11:32:09 Severity:5 Deauthenticating with station 00:12:f0:52:2d:7f (reserved 2).
    Sep 02 11:32:09 Severity:5 Disassociated with station 00:12:f0:52:2d:7f
    Sep 02 11:32:10 Severity:5 Associated with station 00:12:f0:52:2d:7f
    Sep 02 11:32:10 Severity:4 Authenticating station 00:12:f0:52:2d:7f to RADIUS.
    Sep 02 11:32:10 Severity:5 Disassociated with station 00:12:f0:52:2d:7f

  • Where do I find my APPLE NETWORK WPA2 PASSWORD

    Hi, a basic question. How do  find my WPA2. Am trying to connect a new  computer.

    Did you use a Mac to set up the AirPort Express originally?
    If yes, do you still have this Mac?

  • WRT300N + EasyLink Advisor + Vista = Where's the WPA2?

    I got my very first laptop and my very first wireless router yesterday, so I'm 8 different kinds of noob.  I apologize if this has been thoroughly discussed in the past, but I can't find an answer in the forums.
    I have a Dell XPS M1330 with an Intel 4965AGN Wireless-N mini card.  I have a LinkSys WRT300N  wireless router.  My laptop is the only device I own that will be using a wireless connection; my desktop and my Xbox 360 are both wired.  My laptop uses Vista and my desktop uses XP SP2.
    When I was using LELA to set up a wireless connection, I followed the instructions: used a network cable to wire the laptop to the network, downloaded the LELA wireless setup thingy, let LELA create the connection, disconnect the network cable, voila.  However, after doing that and setting up the security, I noticed that downloads and file transfers and the like were pretty darn slow.  I checked the wireless network on my laptop and it is listed as "802.11g".  Shouldn't it be "802.11n"?  I thought that with my router and my network card both ending in "N", there should indeed be an "N" in there somewhere.
    I also noticed that "WPA2" is not an option for me when using LELA.  The only options are "WPA," "WEP" and no security.  The fact that I'm seeing "802.11g" coupled with the fact that I can't choose WPA2 in LELA tells me that something is amiss.  I remember reading that using WPA will slow things down for me, so I'm wondering how I can get the wireless-N network that I should be able to have.
    Thanks a million.  If this has been answered a million times before, just shoot me a URL and tell me to shove off.
    Message Edited by knightboat on 10-03-2007 09:20 AM

        Try reseting the router for 20-30 secs .
        Open UI from internet explorer using 192.168.1.1 as address
        You will get username & password screen ,,,no username & default password
        is "admin". Reconfig the router & also check wireless security settings.
        Let me know if issue is still there.

  • Why is WPA2 still being used??

    This a message I wrote recently in a forum that brought up my idea from a couple of years and every year I see new products/WIFI being released, but not changes so here it is again....and hopefully someone who works with the WIFI alliance can bring this to the table.
    I think WPA 3 or 4 needs to come out...I have written on this in different areas and attempted to contact the Wifi Alliance (Austin Texas) with no luck because I can't afford a $15,000 membership... Also linked a stack exchange post I made talking about the SIMPLE change/additions and the post was deleted....SO here it goes
    Current PSK formula is
    DK = PBKDF2(HMAC−SHA1, passphrase, ssid, 4096, 256)
    What this means is it uses HMAC-SHA1 with your passphrase/ssid, 4096 iterations, and produces a 256 bit key
    So for the past 10+ years people have been able to create databases/rainbow tables, etc because your only solving for 1 piece of the formula.
    First thing that needs to change is the number of iterations, 10+ years ago hardware could only bruteforce 100-300 passwords a second. The number of iterations needs to be increased in order to bring that change back in effect. Currently with GPU's this number reaches the 10's of thousands (actually more).
    The next thing would be to change the salt to include the mac of the ***router or client/both so that each router brute forced would require starting from scratch
    DK = PBKDF2(HMAC−SHA1, passphrase, ssid + Router mac***, 4096000, 256) *iterations are 100 times current..not sure if hardware can take this, again it would have to be tested, the number shown is just for illustration purposes.
    Next we need to take the HUMAN element out of the Equation.
    1) a password of 12 or more needs to be implemented
    2) if not already present in the password entered, the router would then GIVE the user a couple of permutations that include at least TWO upper/TWO lower/TWO special characters/TWO numbers and make them choose one. In other words the router would not allow anything less than a more "sophisticated" password.
    Another option would be that after the first formula is used and the client connects successfully the FIRST TIME.... the router then "remembers" that mac address and now the formula changes to
    DK = PBKDF2(HMAC−SHA1, passphrase, ssid + Router Mac, RND, 256)
    Where RND is a random number generated by the router 6-8 digits long for the iterations. Unless a "Hacker" just happened to catch the first handshake and then ran through the set standard 500,000 iteration formula and happened to find the password (being able to decrypt the aes256 exchange of RND), from that point on the formula would be different. This could be the same for the router, or even more secure, for each client connected. So the router would keep a table of Client macs and RND so when the client says "HELLO I want to connect" it would be done using the RND value/formula. If someone was to find how the RND value was saved on the client (physical access to the client) then it would be different for each client. After X many days/X many hours this could be re-set/established again using the first formula and AES256 as an option.
    So this is just some Ideas, with todays technology/hardware it shouldn't be that hard to do. WPA2 is old and getting easier to crack. Many wordlists have been created that easily go up to 10 if not more... "hackers" have been generating wordlists for YEARS. Making the first formula iterations high enough to slow down the brute force attack, and then making the hacker start from scratch with the combination of SSID + Router Mac, PLUS add the fact that after the client is first set up/connected to that router making the number of iterations RND (6-8+ digits)........this just makes it VERY VERY VERY difficult for a wardriver to accomplish finding the password.
    One last thing to add would be to encrypt the DEAUTH packets.. Currently a "wardriver" can deauth the client and when the connection is regained it captures the 4 way handshake...prevent this and again it would be a little more difficult to capture that handshake. Also even if it is captured and its not the FIRST time... it would be a RND value so the "wardriver" wouldn't know where to start, but from scratch. This time with every combination of a 12 character min password, and for each RND 6-8* digit of iterations...
    Honestly with something like this implemented (which isn't too far fetched, especially the simple formula change adding router mac***), and possibly the Random Iterations, wardriving would almost become worthless. Currently a wardriver knows the formula and nothing changes so there is SOME hope that the user used a really easy password, but with the option above even trying the correct password wouldn't work (unless was the first time or a re-authentication time). Even still it would be with a new formula that uses 12 min password/more iterations.
    Hopefully I don't get trashed on this post, all criticisms/ideas/opinions are open.

    thank you for your reply..
    Hopefully it will change... back when this idea was originally thought of (when attempting to vb.net a PSK just for fun), I took into account costs...thats why the changes are pretty simple depending on hardware.  I remember when WPA, WPA 2 first came out it, it was just the cost of a router/new devices (back then lots of money, now routers/hardware is less expensive), depending on the current hardware a simple coding could just be updated (firmware)...example the new WIFI Passport system could be implemented on older hardware once tested/certified...at least according to WiFi alliance.
    The other reason for the change again is the 10+ years of using the same system, i understand it "secure" but with all the computer breaches/security breaches this is just one method to prevent it.  I would definitely upgrade if a newer secure encryption came out...however this really isn't a new encryption, same scheme, basically same formula with a different implementation, which is why I think a simple upgrade would be great...
    so a real world example of the implementation..
    Client says "Hello"
    Router uses DK1 = PBKDF2(HMAC−SHA1, passphrase, ssid + Router Mac, 24576, 256) to encrypt a random number between 15000-30000 and uses it to send its message AES(16745 & message authentication, DK1).
    Client uses DK1 to reverse it to get 16745/message authentication and now uses DK2 = PBKDF2(HMAC−SHA1, passphrase, ssid + Router Mac, 16745, 256) to AES(original message, DK2) in order to show the router that I have the original key/and have recived the new iterations.
    The router now stores 16745 and the client stores 16745 from that point on when wanting to communicate with that mac address.  makes it totally random except the first formula.
    anyway just a concept.. thanks for your reply again.

  • HT1418 I have iPod4 and cannot see day-to-day appointments, etc on PC Outlook calendar.  Only repeated items (birthdays, anniversaries, etc.) are visible.  Where is the rest of my data and how do I restore it to the only calendar I have in Outlook?

    I have iPod4 and cannot see day-to-day appointments, etc on PC Outlook calendar.  Only repeated items (birthdays, anniversaries, etc.) are visible.  Where is the rest of my data and how do I restore it to the only calendar I have in Outlook?
    Thanks

    Hello Schimi. The Time Capsule is a kind of product that offer you two possibility:
    - To use the TC as a router or as an external HD.
    The difference between WPA and WPA 2 are:
    - They are two kinds of internet connection.
    WPA uses dynamic key encryption , which means that the key is constantly changing and makes the invasion of a wireless network more difficult than WEP . WPA is considered one of the highest levels of wireless security for your network and is recommended if your devices support this kind of encryption . Newer routers offer WPA2 security . WPA2 is compatible with WPA , but offers higher security level . In fact, it meets the high standards of many government agencies . If the router and computer support WPA2 , this should be your choice.
    If you need any help or if you find some difficult setting up it you can contact Apple Support.
    I am sure that they can help you with that.
    I am sory for the delay. I holpe that you solve your issue.

  • Why does my laptop no longer connect to our WPA2 shared network drive?

    Our Airport Express is set up to give us access to the internet plus access to a shared network drive via a WPA2 key. Suddenly, I can no longer access the shared network drive, even though my wireless internet access is fine, and the Airport Utility is "recognizing" my computer. I am the only PC user in a house of unsympathetic Mac users who are not having any similar problems! Can anyone tell me what I should do to fix this?
    Thanks very much.

    I don't remember where I found this, but it did work for me.

  • Firefox was working on my new iMac but then, after switching on recently, won't connect to the web – whereas Safari has no problem.

    ===
    Hi
    I bought an iMac a week ago and installed Firefox via Safari. It worked fine for a while but, after a recently switching on, it won't connect to the web whereas Safari has no problems.
    I've tried following the Firefox Help, looking into the iMac firewall, but still no luck.
    I've no idea whether related or not but yesterday I had a system glitch where the iMac stated no wi-fi was installed and only connected via a physical lead to my house router. Also, there was no sound output via Safari. However, after booting up today all seems well – apart from Firefox still not working. It loads the start page but can't access the web.
    I have Little Snitch running, and wonder if that's the culprit... but it's working fine with Safari, seemingly.
    (Finally, how do I stop a dialogue box appearing on start-up saying that "To open “X” you need a Java runtime. Would you like to install one now?)
    Any ideas anyone?
    Cheers
    Rob / Sheffield / UK
    ===

    On the wireless networks that your Mac has had trouble connecting to, do you know which Wireless Security type (WEP, WPA, or WPA2) is being used?
    If it is WEP, one of the problems is that the actual standard relies on a 10 character HEX key for 40bit WEP and a 26 character HEX key for 128bit WEP.   In order to make things easier, vendors use certain algorithms to convert simple alphanumeric passwords (or passphrases) into HEX keys, thus enabling the use of simple easy to remember WEP password rather than lengthy HEX keys. The problem is that different vendors use different algorithms to generate the HEX key and therefore a ASCII password on an AEBS will be hashed differently on a non-Apple client and vice versa.   You may find the following Apple Support article helpful.

  • Laserjet pro 400 MFP M475dw after new firmware no more WPA2

    Dear all,
    After I updated the above printer I was unable to connect to our WIFI network. Our SSID is hidden and has a WPA2 security. Before the upgrade everything was working fine, but now i'm unable to connect. When you enter the SSID manually it askes for the security encryption WEP or WPA. Where did the WPA2 option go???
    When we use WPA we are unable to connect.
    Can we download the older firmware again? I can't find it...

    Hello janwillem_v,
    The Laserjet Pro 400 MFP M475dw is a commercial printer. I would suggest to post in the forum for HP Business Support for a better chance at finding a solution.
    Here is the link to the Commercial Laserjet board:
    http://h30499.www3.hp.com/t5/Printers-LaserJet/bd-​p/bsc-413
    If I have helped in any way, just click the Kudos star on the left. Also, if your issue has been resolved, don't forget to select Accept as Solution

  • WPA/WPA2 secured wireless connection fails for two minurtes for every hour of use.

    Hello.
    I have a brand new ThinkPad T500 2055-A16 with Windows Vista Business. I have a WiFi connection problem. It is not a signal strength problem, as it doesn't work even if I place the computer right next to the access point with no other wireless equipment near by.
    None of my other computers experience this problem. I even bought another ThinkPad T500 2055-A16 at the same time as this one, and that does not have the problem either. The problem is when I connect to a network using WPA2-PSK or WPA-PSK. The connection works fine for half an hour, an hour or two hours, but then without warning, the connection is lost and it is not possible to reconnect for half a minute, a minute or two minutes. The exact times vary. When I switch the network to use WEP or no encryption, everything works fine. But I don't like to use no encryption and I cannot use WEP because I have other computers in my home which does not support WEP.
    I had this problem right from the beginning the first time I used the computer. I have tried many things like disabling power management or IPv6 and other things suggested by my ISP, but it did not change anything, so I switched them back to their default value. I have also tried to update the driver for the Intel(R) WiFi Link 5100 AGN card, but that didn't help the problem. The problem became slightly less annoying when I uninstalled Access Connections, because Vista would then reconnect as soon as it could, whereas I in Access Connections would have to continuously press the connect button until it succeeded. But the problem is still a real pain.
    Some pieces from the Windows Event Viewer, which I think looks interesting (these occur regularly at exactly the same timestamps as when the connection is lost):
     Profile match: Success
     Pre-Association: Success
     Association: Success
     Security and Authentication: Fail
    0x00048005 and 0x0003800b
    Result of diagnosis: Problem found
     Issue referred to: L2Sec Helper Class
    I also see the following message on my access point's log, which also occur at exactly the times when the connection is lost:
    1x:00216b4d7ee6:logout
    (The number match the MAC address of my computer)
    The only other message which is logged on my Access Point when all log options are enabled is "Time initialized by NTP server".
    How can I solve this problem so that I can have undisrupted wireless Internet access?

    Edit: Actually my other ThinkPad T500 2055-A16 also fails in the same way, but my ThinkPad SL500 2746-9BG and my Medion laptops works fine, also running Vista.

  • No AR5008 WPA2 Support for XP

    I just recently purchased a MacBook Pro and loaded it up with Windows XP. Much to my dismay, the wireless driver seems to lack support for WPA2 under XP, only giving me the option of WPA(1). And that really ***** seeing as to how the AirPort Extreme that I also purchased does not support WPA(1), only giving me the option of WPA2. I had to bust out an older linksys Wireless-G router to get on my network with the older security protocol!!
    If I am running OS X 10.5.1 or Windows Vista, I can connect to the airport with WPA2, but using XP, I am stuck with WPA(1). Anyone know where I can find the appropiate driver for Windows XP?
    As a side note, the wireless card shows up as AR5008 under XP and as AR5008X under Vista. However the Vista driver does not work under XP.

    Sorry for not checking on my own question. I just decided to use Vista instead. As for the answer to your question, no, the patch did not work.
    That particular patch is part of Service Pack 2 and therefore does not need to be installed separately.
    The Atheros website says that they don't supply a WPA2 driver for XP for this wireless chipset!! I think that is garbage, but what can one man do.
    Anyways, I find myself using OS X more and more these days :-P So, I will just use Vista for my (diminishing) Windows needs.

  • Leopard won't accept WPA password where Tiger accepted

    I've been doing all sorts of diagnostic experiments trying to figure out why I can't wirelessly connect under Leopard using WPA encryption while I was able to do so successfully under Tiger... With Leopard, encryption turned off or WEP encryption works just fine but NOT WPA and that's the encryption I want to use.. I've finally done what I believe to be a consistent and well controlled experiment which is telling me that Leopard will not accept a WPA password that is perfectly acceptable under Tiger... They changed some of the wireless interface gui's between Tiger and Leopard but there is one that appears to be identical between the two and that is the Network Setup Assistant.app that is found (under either Tiger or Leopard) at /System/Library/CoreServices... And I also have a cloned version of my two week old Tiger (10.4.9) system with all my files contained on an external firewire drive. If I boot off that Tiger system and walk through the above mentioned Assistant, when I get to the place where it asks me to enter the WPA password, it accepts that password and moves forward to the next step 100% of the time. I've tried it many times... If I then reboot under Leopard, walk through precisely the same assistant and enter precisely the same password (I've typed it many times, used copy and paste many other times to ensure no typos), instead of connecting I get (100% of the time) a message that says "Sorry, The Password you entered is invalid".... I also notice that it takes a while (maybe 10 seconds) for it to come back with that error for whatever that might be worth... The reason the "100% of the time" above is important is because when I just go to Network in system preferences and walk through that wizard while trying to set up this WPA network, I usually get simply "connection failed" but if I just keep trying eventually it always says it connected (though in reality it never does)... And it never tells me that the password is invalid but this other wizard tells me that 100 % of the time... So when it tells me it connected, I will then go try to connect to a web page and it never works... So why it sometimes tells me it connects I can't say but reality, it never does and now I'm slowly becoming convinced it is because it never accepts my WPA password, never....
    So does anyone out there know whether there is some particular format for WPA passwords??? My router is a NetGear WGU624... I've contacted NetGear about this and they are worthless... I might try them again now that I've learned that the password is NEVER being accepted but I don't hold much hope that they can help...
    Any ideas about what might be going wrong with passwords under WPA in Leopard???
    thanks... bob...

    I've been pursuing the same issue for a few days and just found a resolution (but not the root cause). (Same symptoms seen by Jason Guinn's over on http://discussions.apple.com/thread.jspa?threadID=1195706) I upgraded my PowerBook and MBP just fine but my iMac had the problems you and Jason describe.
    Dig it. This WPA2 password:
    3R3HFVNGxe845xrk
    Works for the PowerBook and MBP. But for some reason when I use that password from the iMac, I get the (broken) behavior described. Took my setup to the Genius and he reset my Airport Extreme base station and set the password to:
    testtest
    And the problematic behavior resolved. I got full bars and was able to ping and browse everything. I have since changed my password to something more secure. My advice is start with testtest and see if the problem resolves. Then experiment with some stronger WPA2 passwords that work for all your systems.
    Incidentally, I had similar issues with the wireless on my TiVO when I set it up about six months ago. For some reason their system wouldn't accept the (long) WPA2 password I was using that the time. At that time I configured the shorter one (3R3HFVNGxe845xrk) for the sake of the TiVO. It's so odd that two vendors have had bugs exercised by particular key material. So wierd.

  • My Ipad said there was an update. It asked for a network name which i wrote, sikkerhed WPA2, and my internet code - now my screen is frozen - it won,t do anything at all - help please

    My Ipad said there was an update. It asked for a network name and i typed my e-mail network name and password. Now I have a locked frame where it says  Another network - name (my network name)  safety - WPA2   password - my internet password. Now it is frozen - when i press button it says Ipad not adjusted - continue? and nothing happens alt all. I can't get away from this screen. Please help

    Try to reset the device:
    Device Reset (won't affect settings/data/music/apps/etc)
    1. Press and hold (& continue to hold) BOTH the Sleep/Wake button & the Home button.
    2. Continue to hold BOTH (ignoring any other messages that may show) until you see the Apple logo on the screen.
    3. Release BOTH buttons when you see the Apple logo and allow the device to boot normally.

Maybe you are looking for