We onboard our clients with Cloudpath XpressConnect Wizard, By default, Apple devices do not trust any certificates for EAP. Your onboarding needs to setup the trust for the root certificate and any intermediate CAs, if any. Similarly, Windows can be set up to trust certificates from a particular CA and certs with particular hostnames.
Bruce Osborne Wireless Engineer IT Infrastructure & Media Solutions (434) 592-4229 LIBERTY UNIVERSITY Training Champions for Christ since 1971 From: Eric T. Barnett [mailto:[email protected]] Sent: Tuesday, March 17, 2015 3:45 PM Subject: Re: PEAP cert question Yes. It shows the proper name. Apparently, from some of the off-list replies I’ve gotten (thanks!), this is normal functionality. Unless there’s a better/easier way to do this other than PEAP? --Eric From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Mike King Sent: Tuesday, March 17, 2015 2:03 PM To: [email protected]<mailto:[email protected]> Subject: Re: [WIRELESS-LAN] PEAP cert question Eric, It's been a little while since I've bumped into this, but did you use the correct name for your certificate, and was it a server certificate? I think the name had to be the radius servers name. On Tue, Mar 17, 2015 at 10:43 AM, Eric T. Barnett <[email protected]<mailto:[email protected]>> wrote: We’re running PEAP for our WPA2-Enterprise SSID, but we keep getting warning messages saying that we’re not using a verified cert. We’re currently using GlobalSign. Is there anybody out there running PEAP on a cert that doesn’t give this error? Mine expires this August, but I’d gladly get rid of it for a cert that doesn’t cause Apple and Microsoft to give that error. Regards, Eric Barnett Wireless Administrator Information and Technology Services Arkansas State University 870 680 4243<tel:870%20680%204243> ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
