User accounts not in the Private Client Groups (key-based) list can not authenticate to the WiFi. Why would this occur?

[daniel_fong]

I have two different sites that have Private Client Groups (key-based) implemented.

In the first site, users who are not on the PCG list cannot authenticate on the WiFi.

In the second site, users who are in the PCG list can authenticate on the WiFi.

I have pushed out a complete configuration update to all APs and have them rebooted.

[samantha_lynn]

Are there other SSIDs available that are not using PCG? If there are, could you enable auth debugs, try to connect to the SSID again, wait for that to fail and then pull tech data from the AP we tried to connect to?

This guide reviews how to enable auth debugs: https://thehivecommunity.aerohive.com/s/article/Authentication-Auth-Debugs

This guide reviews how to get tech data in ExtremeCloud IQ: https://thehivecommunity.aerohive.com/s/article/How-to-download-tech-data-in-HiveManager

If you could email the tech data and the MAC address of the test client you used to replicate the issue to communityhelp@aerohive.com, I can review the data and let you know what I find.