On 23/04/15 00:08, Curtis K. Larsen wrote:
> For those running EAP-TLS - I am wondering if you've seen this.
> 
> If an OSX 10.10.2, or 10.10.3 device already has other certificates from 
> iCloud or similar in their keychain, and then they add the eap-tls user cert 
> - upon waking their device from sleep they get prompted to "select a 
> certificate".  This happens repeatedly even though the user tells the OS to 
> "remember this information" on the same prompt, and the check box is also 
> enabled in Networks>WiFi>advanced to "Remember networks this computer has 
> joined".  
> 
> If the user selects the eap-tls cert it does of course connect but it is an 
> annoyance to constantly have to re-select when they never had to do anything 
> like that with PEAP.  Have any by chance encountered this issue?  Found a fix 
> or work-around?  If so please let me know.

We use EAP-PEAP (MS-CHAP), and see something similar, although we have
Login Window profiles such that the user needs to hit 802.1x Connect in
Network which then uses the network profile. There's some discussion at
https://jamfnation.jamfsoftware.com/discussion.html?id=13810

We did get some eapolclient logs but I can't remember the details, and
our Mac sysadmin is on holidays so I can't ask him either. I'm pretty
sure we have a bug open with Apple, and we didn't even have to pay $800
for the privilege. Personally I'm on 10.10.3 and can confirm it's very
annoying, we're waiting for a fix before upgrading our fleet of laptops.

-- 
James Andrewartha
Network & Projects Engineer
Christ Church Grammar School
Claremont, Western Australia
Ph. (08) 9442 1757
Mob. 0424 160 877

**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Reply via email to