Wireless Access

Hi.. anyone having issue connecting a Blackberry Z10 using WPA2 EAP, PEAP, MSCHAPV2 via 802.1x authentication. I keep having the error authentication failed but when using the same login on other devices, it works.

What does the Radius server have for log entries during this failure?   Is the Blackberry trying to validate the certificate on the Radius server?  Does it have it as a trusted authority?

My Z10 connected to our secure EAP-PEAP SSID with no issues and I did not have to load or verify a server cert. 

I am using the local user-db as authentication. We are not using any domain controller or radius server.

This is my settings. On older BB, it can work when I enable the "Disable Server Certificate Validation" on the wireless profile. However on Z10, there is no such setting.

Is the device type being recognised as Win 7 for Z10?

I don't have much experience with Blackbery clients, and this may not be a long term solution, but just to see if it works you can try this.

If you don't have an external Radius server, then you have the controller doing 802.1X termination.   If you look at the dot1x authentication profile, you can confirm what certificate is being used.   Try loading this certificate onto the Z10 and using it as the "CA Certificate" (again, I don't have a lot of Blackberry experience, so i am not sure of this process to load the certificate, but I am sure it is documented).

 It is the Server-Certificate entry under the Advanced tab of the 802.1X Authentication profile in use.

@clembo thanks. will give it a try when i can get hold of my colleague's device.