What reasons would there be for a PPSK to stop working on a handful of devices, while it works on others connected to the same AP?

[tgmatula]

Our campuses are experiencing chronic connectivity issues with one of the following symptoms:

1) Either the PPSK stops working on their device. 

2) They are able to connect to the SSID and PPSK but no internet connectivity. Cannot ping DNS or Gateway. 

Testing:

Rebooting the AP does nothing for the user. Moving closer to the AP or changing the connection preference between 2.4 and 5GHz has no effect.

The only solution... so far is to locate which RADSEC(proxy) the AP is connecting to and reboot it...

Oak-AP106#show idm

IDM client: Enabled Per SSID

IDM Proxy IP: 10.31.120.40

IDM proxy: Disabled

RadSec Certificate state: Valid

RadSec Certificate Issued: 2019-01-15 08:25:32 GMT

RadSec Certificate Expires: 2020-01-15 08:25:32 GMT

Is the IDM Proxy supposed to show "DIsabled" even though the IP is listed and it is using that particular proxy for PPSK authentication?  

Anyone have any permanent solutions for the RADSEC issues???

[tgmatula]

I have verified we are using Cloud based PPSK authentication and the RADSEC servers do show enabled.

IDM proxy: Enabled

IDM server: cloud-va-idmauth.aerohive.com

[samantha_lynn]

Are you using cloud based PPSK credentials or locally stored PPSK credentials (if you're not sure you can see this in the PPSK user group object). If you're using cloud based PPSKs, you'll want the IDM proxy to say Enabled (on the AP that is acting as the IDM proxy).