Security

Anyone having issues with the Intune Wired profile for TEAP? 

I kept getting the "Client did not complete EAP transaction" error. After some digging I found that even though I specified all my trusted root CAs under "Root certificates for server validation" in the Intune profile they don't apply on this first screen here when you go to view settings in the network adapter, I have to manually check them:

But when I click the primary and secondary Configure options, all the cert auths are pre checked and working fine just as specified in my profile.

It seems like it needs the first page to be checked as well but somehow doesn't get the settings. This isn't great for scaling the solution. I would rather just set the Intune profile and be done, but it looks like I may still have to go with exporting an XML and deploying...

Has anyone run into this?

Why are you specifying the "connect to these servers"?  Does the case in that match exactly with your configured ClearPass hostname?  Most of my customers do not configure this option and just rely on their PKI/certificate trust to validate the RADIUS server.  It also makes things like upgrades and migrations MUCH easier if you don't have to mess with client supplicant settings.

Anyone having issues with the Intune Wired profile for TEAP? 

I kept getting the "Client did not complete EAP transaction" error. After some digging I found that even though I specified all my trusted root CAs under "Root certificates for server validation" in the Intune profile they don't apply on this first screen here when you go to view settings in the network adapter, I have to manually check them:

But when I click the primary and secondary Configure options, all the cert auths are pre checked and working fine just as specified in my profile.

It seems like it needs the first page to be checked as well but somehow doesn't get the settings. This isn't great for scaling the solution. I would rather just set the Intune profile and be done, but it looks like I may still have to go with exporting an XML and deploying...

Has anyone run into this?

Why are you specifying the "connect to these servers"?  Does the case in that match exactly with your configured ClearPass hostname?  Most of my customers do not configure this option and just rely on their PKI/certificate trust to validate the RADIUS server.  It also makes things like upgrades and migrations MUCH easier if you don't have to mess with client supplicant settings.

Anyone having issues with the Intune Wired profile for TEAP? 

I kept getting the "Client did not complete EAP transaction" error. After some digging I found that even though I specified all my trusted root CAs under "Root certificates for server validation" in the Intune profile they don't apply on this first screen here when you go to view settings in the network adapter, I have to manually check them:

But when I click the primary and secondary Configure options, all the cert auths are pre checked and working fine just as specified in my profile.

It seems like it needs the first page to be checked as well but somehow doesn't get the settings. This isn't great for scaling the solution. I would rather just set the Intune profile and be done, but it looks like I may still have to go with exporting an XML and deploying...

Has anyone run into this?

Anyone having issues with the Intune Wired profile for TEAP? 

I kept getting the "Client did not complete EAP transaction" error. After some digging I found that even though I specified all my trusted root CAs under "Root certificates for server validation" in the Intune profile they don't apply on this first screen here when you go to view settings in the network adapter, I have to manually check them:

But when I click the primary and secondary Configure options, all the cert auths are pre checked and working fine just as specified in my profile.

It seems like it needs the first page to be checked as well but somehow doesn't get the settings. This isn't great for scaling the solution. I would rather just set the Intune profile and be done, but it looks like I may still have to go with exporting an XML and deploying...

Has anyone run into this?

I've not seen a TEAP or WiFi Profile in Intune, but may not have found it. Where did you find it?

Anyone having issues with the Intune Wired profile for TEAP? 

I kept getting the "Client did not complete EAP transaction" error. After some digging I found that even though I specified all my trusted root CAs under "Root certificates for server validation" in the Intune profile they don't apply on this first screen here when you go to view settings in the network adapter, I have to manually check them:

But when I click the primary and secondary Configure options, all the cert auths are pre checked and working fine just as specified in my profile.

It seems like it needs the first page to be checked as well but somehow doesn't get the settings. This isn't great for scaling the solution. I would rather just set the Intune profile and be done, but it looks like I may still have to go with exporting an XML and deploying...

Has anyone run into this?

I've not seen a TEAP or WiFi Profile in Intune, but may not have found it. Where did you find it?

Anyone having issues with the Intune Wired profile for TEAP? 

I kept getting the "Client did not complete EAP transaction" error. After some digging I found that even though I specified all my trusted root CAs under "Root certificates for server validation" in the Intune profile they don't apply on this first screen here when you go to view settings in the network adapter, I have to manually check them:

But when I click the primary and secondary Configure options, all the cert auths are pre checked and working fine just as specified in my profile.

It seems like it needs the first page to be checked as well but somehow doesn't get the settings. This isn't great for scaling the solution. I would rather just set the Intune profile and be done, but it looks like I may still have to go with exporting an XML and deploying...

Has anyone run into this?

Intune does have a wired TEAP profile now. Let me know if you try it and experience the same.

I went the XML route and it works fine...just would be nice to use a profile. Submitted a ticket to MSFT on it.

I've not seen a TEAP or WiFi Profile in Intune, but may not have found it. Where did you find it?

Anyone having issues with the Intune Wired profile for TEAP? 

I kept getting the "Client did not complete EAP transaction" error. After some digging I found that even though I specified all my trusted root CAs under "Root certificates for server validation" in the Intune profile they don't apply on this first screen here when you go to view settings in the network adapter, I have to manually check them:

But when I click the primary and secondary Configure options, all the cert auths are pre checked and working fine just as specified in my profile.

It seems like it needs the first page to be checked as well but somehow doesn't get the settings. This isn't great for scaling the solution. I would rather just set the Intune profile and be done, but it looks like I may still have to go with exporting an XML and deploying...

Has anyone run into this?

I was able to push a wired TEAP profile from Intune, and it did put the server in the root location as needed; I also found that It's pushing that profile to all of my wired adapters - including the PANGP Virtual adapter. 
We're not ready to use TEAP for those VPN profiles, yet, and even if we could, that server also shows up in that setting. I can get around by checking the fallback option (but I'm not sure what that setting is when looking at the intune list).
Is there a way to prevent the virtual adapters from getting the policy?

Intune does have a wired TEAP profile now. Let me know if you try it and experience the same.

I went the XML route and it works fine...just would be nice to use a profile. Submitted a ticket to MSFT on it.

I've not seen a TEAP or WiFi Profile in Intune, but may not have found it. Where did you find it?

Anyone having issues with the Intune Wired profile for TEAP? 

I kept getting the "Client did not complete EAP transaction" error. After some digging I found that even though I specified all my trusted root CAs under "Root certificates for server validation" in the Intune profile they don't apply on this first screen here when you go to view settings in the network adapter, I have to manually check them:

But when I click the primary and secondary Configure options, all the cert auths are pre checked and working fine just as specified in my profile.

It seems like it needs the first page to be checked as well but somehow doesn't get the settings. This isn't great for scaling the solution. I would rather just set the Intune profile and be done, but it looks like I may still have to go with exporting an XML and deploying...

Has anyone run into this?

It put the server in and it checked the correct certs in that area?

I was able to push a wired TEAP profile from Intune, and it did put the server in the root location as needed; I also found that It's pushing that profile to all of my wired adapters - including the PANGP Virtual adapter. 
We're not ready to use TEAP for those VPN profiles, yet, and even if we could, that server also shows up in that setting. I can get around by checking the fallback option (but I'm not sure what that setting is when looking at the intune list).
Is there a way to prevent the virtual adapters from getting the policy?

Intune does have a wired TEAP profile now. Let me know if you try it and experience the same.

I went the XML route and it works fine...just would be nice to use a profile. Submitted a ticket to MSFT on it.

I've not seen a TEAP or WiFi Profile in Intune, but may not have found it. Where did you find it?

Anyone having issues with the Intune Wired profile for TEAP? 

I kept getting the "Client did not complete EAP transaction" error. After some digging I found that even though I specified all my trusted root CAs under "Root certificates for server validation" in the Intune profile they don't apply on this first screen here when you go to view settings in the network adapter, I have to manually check them:

But when I click the primary and secondary Configure options, all the cert auths are pre checked and working fine just as specified in my profile.

It seems like it needs the first page to be checked as well but somehow doesn't get the settings. This isn't great for scaling the solution. I would rather just set the Intune profile and be done, but it looks like I may still have to go with exporting an XML and deploying...

Has anyone run into this?

It did. The server name that I put here shows up in all three places - the "root" of the TEAP settings, and on the "Configure" for both the primary and secondary authentication screens. My problem is it's on ALL of my wired network adapters, virtual or physical.

It put the server in and it checked the correct certs in that area?

I was able to push a wired TEAP profile from Intune, and it did put the server in the root location as needed; I also found that It's pushing that profile to all of my wired adapters - including the PANGP Virtual adapter. 
We're not ready to use TEAP for those VPN profiles, yet, and even if we could, that server also shows up in that setting. I can get around by checking the fallback option (but I'm not sure what that setting is when looking at the intune list).
Is there a way to prevent the virtual adapters from getting the policy?

Intune does have a wired TEAP profile now. Let me know if you try it and experience the same.

I went the XML route and it works fine...just would be nice to use a profile. Submitted a ticket to MSFT on it.

I've not seen a TEAP or WiFi Profile in Intune, but may not have found it. Where did you find it?

Anyone having issues with the Intune Wired profile for TEAP? 

I kept getting the "Client did not complete EAP transaction" error. After some digging I found that even though I specified all my trusted root CAs under "Root certificates for server validation" in the Intune profile they don't apply on this first screen here when you go to view settings in the network adapter, I have to manually check them:

But when I click the primary and secondary Configure options, all the cert auths are pre checked and working fine just as specified in my profile.

It seems like it needs the first page to be checked as well but somehow doesn't get the settings. This isn't great for scaling the solution. I would rather just set the Intune profile and be done, but it looks like I may still have to go with exporting an XML and deploying...

Has anyone run into this?