Security

We currently setup 802.1x ssid using Clearpass as Radius server. Our client use Windows 8 that joined to domain and want to use Windows Login username and password to authentiacate to the ssid but failed to achieve that. If manually key in the username and password successful connected. We configure the GPO to push the wireless setting to the device but still cannot work. From the access tracker the error code is 215.Can someone help me.Enclosed are the screenshot of GPO setting and the error details. Thanks

 

 

Are you pushing down the root CA if it's private? 


Thanks, 
Tim

Hi Tim,

Currently no. The root CA is from clearpass or from AD? How can i get that?Thanks.

Regards,
Amir

Are you only doing 802.1X for AD-joined machines or is it used for other devices as well?

Only for join AD machine.

Regards,
Amir

OK, then you'll want to download the RADIUS server certificate from
Administration > Certificates > Server Certificate > RADIUS and then push it
down to the clients via Group Policy as well as configured your 802.1X
policy to check that certificate.

Ok thanks. I will try on this and will update back later.

Regards,
Amir

i installed the cert in the trusted root certification authorities. But inside the gpo security setting, that cert not appear in the cert list.

Did you install the certificate on the machine you're running the GPO
editor?

yes installed and still not appear in the list

Did you install it to the user store or the computer store?

 

Did you completely close out of the GPO editor after installing the cert and then re-open?

i've installed in computer store and close the gpo editor.still same

you need to import it into the 'Trusted Root Authorities' tab.  https://technet.microsoft.com/en-us/library/cc772491.aspx

 

 

 

yes i've already import to that trusted root authorities.

You should proably open a case with Microsoft TAC, then.

Issue solved. I manually insert the cert inside the internet option rather than double click that cert than install from there. I can found the server cert inside the list and push the gpo. Finally can successful connect to 802.1x wifi using windows login credential. Thanks guy for your assistance.