Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Windows 10 (15.11) and TLS 1.2 on 802.1x

This thread has been viewed 0 times

  • 1.  Windows 10 (15.11) and TLS 1.2 on 802.1x

    Posted Dec 18, 2015 01:02 PM

    Hi,

    We are affected by the case related here: http://community.arubanetworks.com/t5/Unified-Wired-Wireless-Access/Windows-10-upgrade-cannot-login-to-aruba-after-update/m-p/253962#M56007

    (Windows 10 version 15.11 stop to use TLS 1.0 on 802.1x EAP)

     

    Like we are an University, it's impossible to configure the REGEDIT of thousands of students PC.

    Have some way to force TLS 1.2 on Aruba Controller with RADIUS Termination?

     

    Controller: M3

    ArubaOS: 6.3.1.19 with Termination enabled

    Radius: FreeRADIUS

     

     

    Best Regards,

    Paulo Raponi

     



  • 2.  RE: Windows 10 (15.11) and TLS 1.2 on 802.1x

    EMPLOYEE
    Posted Dec 18, 2015 01:03 PM
    You need to terminate on your RADIUS server.

    Sent from Nine


  • 3.  RE: Windows 10 (15.11) and TLS 1.2 on 802.1x

    Posted Dec 18, 2015 01:04 PM

    When we disable the Termination on Aruba and let it on FreeRadius, we have a lot of trouble with some devices, like iOS, etc....



  • 4.  RE: Windows 10 (15.11) and TLS 1.2 on 802.1x

    EMPLOYEE
    Posted Dec 18, 2015 01:06 PM
    Do you have the same RADIUS server certificate in both the controller and freeRADIUS?



    Sent from Nine


  • 5.  RE: Windows 10 (15.11) and TLS 1.2 on 802.1x

    Posted Dec 18, 2015 01:12 PM

    On controller has a public valid certificate (Verisign). On Radius not.



  • 6.  RE: Windows 10 (15.11) and TLS 1.2 on 802.1x

    EMPLOYEE
    Posted Dec 18, 2015 01:15 PM
    You will need to put that certificate on your radius server.

    Sent from Nine


  • 7.  RE: Windows 10 (15.11) and TLS 1.2 on 802.1x

    EMPLOYEE
    Posted Dec 18, 2015 01:15 PM

    Hi, 

     

    What is the FreeRADIUS version? Is that 2.2.8 or 3.0.9 and above that has the fix for TLS 1.2? 

     

    Thanks, 

    Rajaguru Vincent