Most of our clients are Windows 7, but we have a few 8.1 floating around. Cisco Wireless Infrastructure with ACS 5.5 as the AAA server.
We're trying to replace the EAP certificate for wireless with a DigiCert signed one and are having a few snags getting the Windows clients to use it. No on-screen errors show and the only thing I could find was in the Crimson logs: Microsoft-Windows-EapMethods-RasTls/Operational Channel Authentication failed for EAP method type 25. The error was 0x54F. EAP method type 25 is PEAP (which is correct) and from what I've found 0x54F is "internal error" which is fairly useless. Aside from the issuer, the only differences I can spot between the old cert and the new are: Old is 1024 bit, new is 2048 bit Old is SHA-1 and new is SHA-256 Is either of those likely the problem? Anyone in a similar setup where things work properly? DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.447.6014 (fax) HARRISON COLLEGE 500 North Meridian St Suite 500 Indianapolis, IN 46204-1213 www.harrison.edu<http://www.harrison.edu/>
