Wireless Access

Reply
Contributor I
Posts: 56
Registered: ‎08-28-2008

Windows 10 (15.11) and TLS 1.2 on 802.1x

[ Edited ]

Hi,

We are affected by the case related here: http://community.arubanetworks.com/t5/Unified-Wired-Wireless-Access/Windows-10-upgrade-cannot-login-to-aruba-after-update/m-p/253962#M56007

(Windows 10 version 15.11 stop to use TLS 1.0 on 802.1x EAP)

 

Like we are an University, it's impossible to configure the REGEDIT of thousands of students PC.

Have some way to force TLS 1.2 on Aruba Controller with RADIUS Termination?

 

Controller: M3

ArubaOS: 6.3.1.19 with Termination enabled

Radius: FreeRADIUS

 

 

Best Regards,

Paulo Raponi

 

Guru Elite
Posts: 8,320
Registered: ‎09-08-2010

Re: Windows 10 (15.11) and TLS 1.2 on 802.1x

You need to terminate on your RADIUS server.

Sent from Nine

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor I
Posts: 56
Registered: ‎08-28-2008

Re: Windows 10 (15.11) and TLS 1.2 on 802.1x

When we disable the Termination on Aruba and let it on FreeRadius, we have a lot of trouble with some devices, like iOS, etc....

Guru Elite
Posts: 8,320
Registered: ‎09-08-2010

Re: Windows 10 (15.11) and TLS 1.2 on 802.1x

Do you have the same RADIUS server certificate in both the controller and freeRADIUS?



Sent from Nine

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor I
Posts: 56
Registered: ‎08-28-2008

Re: Windows 10 (15.11) and TLS 1.2 on 802.1x

On controller has a public valid certificate (Verisign). On Radius not.

Aruba Employee
Posts: 151
Registered: ‎02-14-2013

Re: Windows 10 (15.11) and TLS 1.2 on 802.1x

Hi, 

 

What is the FreeRADIUS version? Is that 2.2.8 or 3.0.9 and above that has the fix for TLS 1.2? 

 

Thanks, 

Rajaguru Vincent 

Thanks,
Rajaguru Vincent
Guru Elite
Posts: 8,320
Registered: ‎09-08-2010

Re: Windows 10 (15.11) and TLS 1.2 on 802.1x

[ Edited ]
You will need to put that certificate on your radius server.

Sent from Nine

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
Showing results for 
Search instead for 
Did you mean: