Wireless Access

 View Only
last person joined: 2 days ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

EAP-TLS authentication error-iOS devices

This thread has been viewed 15 times

  • 1.  EAP-TLS authentication error-iOS devices

    Posted Jul 25, 2024 08:10 AM

    Im getting below error when trying to connect to wifi. . CA root certificate already in trusted list cleparpass. 

    2024-07-25 14:05:00,610 [Th 56 Req 2631380 SessId R0004c697-06-66a23f6c] ERROR RadiusServer.Radius - TLS Alert read:fatal:certificate unknown
    2024-07-25 14:05:00,610 [Th 56 Req 2631380 SessId R0004c697-06-66a23f6c] ERROR RadiusServer.Radius - TLS_accept:failed in error
    2024-07-25 14:05:00,610 [Th 56 Req 2631380 SessId R0004c697-06-66a23f6c] ERROR RadiusServer.Radius - rlm_eap_tls: SSL_read failed inside of TLS (-1), TLS session fails. error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown
    2024-07-25 14:05:00,610 [Th 56 Req 2631380 SessId R0004c697-06-66a23f6c] ERROR RadiusServer.Radius - rlm_eap_tls: TLS Handshake failed


  • 2.  RE: EAP-TLS authentication error-iOS devices

    EMPLOYEE
    Posted Jul 25, 2024 09:52 AM

    Either the trust of the client certificate isn't configured properly on the RADIUS server or the trust of the RADIUS certificate isn't correct on the client device.



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------

    Original Message


  • 3.  RE: EAP-TLS authentication error-iOS devices

    Posted Jul 25, 2024 12:38 PM

    Check what cert is used if any for authentication of the connection. And also CA subordinate cert if it is used for signing into trust list. Don't forget to select EAP for usage on both certs.

    Best, Gorazd



    ------------------------------
    Gorazd Kikelj
    MVP Guru 2024
    ------------------------------

    Original Message