We had the same problem, and the reg key fix in method 3 worked here as well
We applied the monthly updates to some of our servers last night, and it broke our WPA2 wireless authentication. I opened a ticket with Microsoft, and found that something in KB931125, Update for Root Certificates For Windows Server 2008R2 caused the problem. Apparently our local domain controller was sending the entire certificate chain in its RADIUS requests, and the update caused it to exceed the allowed RADIUS packet length. The fix was to create a registry key that tells NPS to send only the certificate and not the entire chain. Here's the key that fixed the problem for us: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL Value name: SendTrustedIssuerList Value type: REG_DWORD Value data: 0 (False) We may have hit the problem because we have an NPS in the local domain relaying to NPS in a different domain. Thanks John From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Jennifer Francis Wilson Sent: Tuesday, December 18, 2012 5:45 AM To: [email protected] Subject: Re: [WIRELESS-LAN] Latest Microsoft Patch- Anyone feeling pain on secure networks? Yep, Resolved it yesterday for our NPS servers serving our Cyprus campus (used Method 3). I'm looking for it on our IAS servers for our main campus but only seeing the odd one or two entries of error 266 in the logs so not sure at the moment what the extent of the issue is. Jen. From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Lee H Badman Sent: 18 December 2012 02:12 To: [email protected]<mailto:[email protected]> Subject: [WIRELESS-LAN] Latest Microsoft Patch- Anyone feeling pain on secure networks? http://social.technet.microsoft.com/Forums/en-US/winserveressentials/thread/2636b892-7113-4692-a4f4-53d330ca6062 This sort of thing... I've got a couple of clients that started acting up with last patch and our server guys are examining the general lay of the land. I don't fully understand it yet, but wondering if anyone else is seeing similar. -Lee Badman ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
