topic RE: Unable to join wireless from an android using PKI user cert in ExtremeWireless (WiNG)

Unable to join wireless from an android using PKI user cert

Derek_Brown — Fri, 22 Aug 2014 21:27:00 GMT

We have implemented a wireless network for company employees that uses user based certificate authentication. It is working fine for laptops and iPhones, but we have been unable to get any of the android (Galaxy S4's) to work. We have installed the cert (both the root and user) on the phone. When we attempt to join, we get a setting box that has type, CA and user cert but also has a section named "IDENTITY". We set it to TLS, select the root cert for the CA section and the user cert (just called androiduser). But I have no idea what the "Identity" is. We have tried entering the user domain/ad_name, ad_name, etc. but nothing works.The whole reason behind the cert is so that users don't have to enter anything. I checked my wm3400 log and all it says is user authentication failed. Again, the same certificate setup works fine on laptops and iPhones/iPads. Has anyone had success setting up and android (specifically an S4 since each release of android changes something) on wireless with user certificates? If so can you let me know what steps you used.

Thanks
Derek

RE: Unable to join wireless from an android using PKI user cert

Naoman_Nabil_Gh — Fri, 22 Aug 2014 21:54:00 GMT

Which version of Android?

RE: Unable to join wireless from an android using PKI user cert

MrGuga — Mon, 25 Aug 2014 23:07:00 GMT

Have you tried leaving it blank?
Also try ad_name@domain.com

RE: Unable to join wireless from an android using PKI user cert

Derek_Brown — Tue, 26 Aug 2014 00:48:00 GMT

The phone is dead right now but the user says it is 4.0...... We did trying leaving it blank and it keeps popping up for an entry.

Derek

RE: Unable to join wireless from an android using PKI user cert

Ronald_Dvorak — Tue, 26 Aug 2014 01:41:00 GMT

Try to use the name that was used in the user certificate. Here a example...
http://networklessons.com/wireless/eap-tls-certificates-for-wireless-on-android/

Please check the log of the Authentication Server, that should give you the answer why the authentication failed.
The wm only get's the reject information from the AS but the AS log should show the reason for the reject.