Echoing what Dennis stated, You will need an onboarding utility/supplicant to provide the needed certs to the BYOD in question. If you control the devices, then you can always push the certs via other means, like Group Policy. Without those trusted certs installed onto the client devices, the error will continue to persist. If you do not have an onboarding method, you can provide instructions for your users on how to configure the wireless network themselves.
Patrick Patrick Mauretti Sr. Network Administrator Massasoit Community College ________________________________________ From: The EDUCAUSE Wireless Issues Constituent Group Listserv [[email protected]] on behalf of Dennis Xu [[email protected]] Sent: Tuesday, March 17, 2015 10:53 AM To: [email protected] Subject: Re: [WIRELESS-LAN] PEAP cert question We only see Apple gives the "not verified" error for our certificate. Other devices are fine. We also deployed the SecureW2 JoinNow utility for secure wireless device onboarding. The Apple devices configured by JoinNow do not get the verification error because JoinNow pushes the trusted certificates to the devices. --- Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 [email protected] www.uoguelph.ca/ccs ----- Original Message ----- From: "Eric T. Barnett" <[email protected]> To: [email protected] Sent: Tuesday, March 17, 2015 10:43:55 AM Subject: [WIRELESS-LAN] PEAP cert question We’re running PEAP for our WPA2-Enterprise SSID, but we keep getting warning messages saying that we’re not using a verified cert. We’re currently using GlobalSign. Is there anybody out there running PEAP on a cert that doesn’t give this error? Mine expires this August, but I’d gladly get rid of it for a cert that doesn’t cause Apple and Microsoft to give that error. Regards, Eric Barnett Wireless Administrator Information and Technology Services Arkansas State University 870 680 4243 ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
