TLS authentication issue : EAP-TLS warning alert by client - close_notify

[Victor Fabian]

After the iOS device successfully passes the onboarding process is not able to authenticate .

I am able to authenticate with no issues Win7 and Android devices

Cert issue?

[tarnold · Accepted solution]

Victor,

Based on the error the client isnt trusting either the Root CA, Intermediate or server cert. 

1. what version of CPPM?

2. did you combine the three when you added them into CPPM

3. You might need to change the network settings from auto to Manual on the trust.

[koen · Accepted solution]

Had the same problem with IOS7 clients only. Turned out to be a trust issue.

"My issue turned out to be a trust issue.

Guest > onboard+workspace > Onboard/MDM Configuration > Network Settings > *your profile* > Trust tab

I had selected to automatically configure trust settings.

Even though the cppm ssl certificate included the entire chain this wasn't working properly.

The fix was to change this to manualy configure the trust settings. Cut up the server cert into its CA and intermediate CA's and upload those individualy and then add them as trusted certificates."

[Victor Fabian]

Thanks Troy,

1. what version of CPPM? 

6.2.5.60869 

2. did you combine the three when you added them into CPPM

I did

3. You might need to change the network settings from auto to Manual on the trust.

Just tried that but it didnt work maybe I am missing something else

[Victor Fabian]

Thanks koenv,

Sorry don't understand this part : 

"Cut up the server cert into its CA and intermediate CA's and upload those individualy and then add them as trusted certificates."

[Victor Fabian]

Im golden now.

I had to tweeked the different certs.

Thank you Guys

[Why_Fly]

Awesome this solved the issue for me on ver 6.3.1.4 with a godaddy cert which contained two intermediate CA's in the trust chain.  

Chopped up the certs individually, uploaded as trusted cert, and selected manually in network settings as shown below.

Bam.  Thank you!

[jensfluegel]

Hello, 

I have the exact same issue in a lab and a customer environment running CP 6.5.5.78974.

All devices can successfully onboard (windows, android, apple) but an iPhone cannot connect to the secure network. I get the alredy mentioned alert.

I alredy tried automatic and manual trust settings without success.

Looking at the iphone certificate trust list everything looks fine.

Can anyone help?

Thanks in advance.

Jens

[cappalli]

What is the root CA for your radius cert? 

Sent from Nine

[jensfluegel]

The root CA is private Microsoft CA.