topic the certificate window did not come up while typing in the correct credentials in Aerohive Migrated Content

the certificate window did not come up while typing in the correct credentials

scott_chen1 — Fri, 24 May 2019 15:03:55 GMT

the certificate window did not come up while typing in the correct credentials

Re: the certificate window did not come up while typing in the correct credentials

scott_chen1 — Fri, 24 May 2019 15:04:21 GMT

AP130 is being used working with Aerohive NG the recent edition. External radius server installed on windows 2016 is functional as the central authentication;

the issue is that the connection to the broadcast ssid is succeeded with OS win 10 & cellphone whatever it is android or IOS but always failed to establish the connection with win 7. The certificate requesting trusting or not just did not come out after I typed in the correct credentials.

Is this something to do with the SHA version and encrypted methodology from the root CA ? the current SHA in use from the CA side is sha256 V3

Re: the certificate window did not come up while typing in the correct credentials

scott_chen1 — Fri, 24 May 2019 15:08:04 GMT

Hardware Model ap130 HiveOS Version HiveOS 6.5r7 build-160188

Re: the certificate window did not come up while typing in the correct credentials

weekdaysailor — Sat, 25 May 2019 20:27:20 GMT

This does sound like a cipher mis-match issue. Is the win7 device completely updated with latest patches?

Re: the certificate window did not come up while typing in the correct credentials

jianghai_zhu — Tue, 28 May 2019 09:49:52 GMT

What I had done after I read the reply from Keith Redfield:

all these security update concerning SHA security consolidation were patched ; but the problem was still ongoing until I made a little change following the advice by Microsoft. Please check workaround as below.

Workaround advised by MS:

1. Set up manually a profile by using "create a ssid connection in the network & file sharing tab "

2. in the profile name, you can just type in any name you like even the same ssid name as the one you are going to connect with

3. in the crypto type and method, choose wpa2 & Enterprise AES

4. unmark the option "validating the server certificate while connecting is expired " ; this is the essential step