Partagez votre expérience!
Hello,
I am trying to connect my smartphone Xperia 10 III Android 12 Update Nov 2022 BN 62.1.A.0.675
to Enterprise WIFI using certificates CORPORATE-WIFI-WPA_EAPIEEE8021X_TLS_NULL
with following setting pushed by azure intune :
Scep Cert policy to android:
Subject name format CN={{AAD_Device_ID}}
Subject alternative name User principal name (UPN) = {{AAD_Device_ID}}@domain.com
Certificate validity period 1 Years
Key usage Key encipherment, Digital signature
Key size (bits) 2048
Hash algorithm SHA-2
Root Certificate "YOUR ROOT CERT"
Extended key usage Client Authentication enter what you cert template says
Renewal threshold (%) 20
SCEP Server URLs "NDES URL"
WIFI Settings policy to android:
SSID "SSID"
Connect automatically Disable
Hidden network Disable
EAP type EAP - TLS
Radius server name "All Ise Nodes"
Root cert for server valid "Your Root Cert"
Authentication method Certificates
Certificates "Scep Cert From earlier"
Identity privacy anonymous this seems to be important
Unfortunately, Cisco ISE do not see my Smartphone MAC Addr and phone does not connect.
We investigated a lot of about this connection issue but do not find the root cause.
Re-enrolled my phone to Intune more than once, resync'ed mgmt policies,
reinstalled certificated, ... does not seem to help.
Also removed Norton 360 security just in case of but no change.
Any idea about the root cause or where the issue can be ?
Situation was the same with March 2022 and July 2022 Android 12 updates
Thanks for your ideas
Hello,
Connecting to traditional WIFI works, 2 and 5Ghz, just WIFI with EAP/TLS with SCEPMAN Cert that does not connect.
Other Android phones like Samsung/Android 11&12&13 and IPhones connect like a charm.
Started sniffing WIFI handshaking between smartphone and Wifi Access points but very few
communication and nothing reach ISE for authentification.
Th
Hey @fdhthr, since it works with different WiFi networks, it doesn't seem to be a WiFi issue then.
You can contact the Sony reps directly thou, maybe they can investigate this issue for you.