It makes sense until the user has no clue that removing the lock totally hoses their device and they have to call the help desk.
Ryan Turner Manager of Network Operations, ITS The University of North Carolina at Chapel Hill +1 919 274 7926 Mobile +1 919 445 0113 Office On Feb 9, 2018, at 1:20 PM, Cappalli, Tim (Aruba Security) <t...@hpe.com<mailto:t...@hpe.com>> wrote: Kind of makes sense though doesn’t it? Why would you want to allow a device unique private key to be used without requiring a device unlock? From: The EDUCAUSE Wireless Issues Constituent Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of "Turner, Ryan H" <rhtur...@email.unc.edu<mailto:rhtur...@email.unc.edu>> Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Date: Friday, February 9, 2018 at 10:01 AM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>" <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Subject: Re: [WIRELESS-LAN] Amazon Fire Tablet Line - 802.1x Support Dropped? For TLS, Android requires a screen lock, and if you remove it post, it breaks the certificate store. That issue isn’t a bug, but another design decision by Google (to make TLS more difficult to use when it isn’t that way with almost every other operating system). From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Osborne, Bruce W (Network Operations) Sent: Friday, February 9, 2018 8:23 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] Amazon Fire Tablet Line - 802.1x Support Dropped? I know there was a bug corrected in SecureW2 802.1X onboarding where they were requiring a screen lock for Android when using PEAP=MSCHAPv2. They corrected the issue in a later release. Bruce Osborne Senior Network Engineer Network Operations - Wireless (434) 592-4229 LIBERTY UNIVERSITY Training Champions for Christ since 1971 From: Mike Atkins [mailto:matk...@nd.edu] Sent: Thursday, February 8, 2018 5:26 PM Subject: Re: Amazon Fire Tablet Line - 802.1x Support Dropped? I have seen dot1x issues with Android tablets that do not have the lock enabled or have it removed after Wi-Fi is configured and working. I know our onboard utility notifies the user that Screen Lock/Pin is required. Does the 802.1x option show up if screen lock is enabled? Mike Atkins Network Engineer Office of Information Technology University of Notre Dame From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] On Behalf Of Johnson, Christopher Sent: Wednesday, February 07, 2018 10:49 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: [WIRELESS-LAN] Amazon Fire Tablet Line - 802.1x Support Dropped? Good Morning, I was curious if anyone had any of the newer Amazon Fire tablets and could confirm something for me? Our support center contacted me in regards to an issue with connecting to our secure network (they were only able to see our “open network”) which matches with our some newer devices will not even display networks that they are unable to connect to – such as WPA2 Enterprise. I had suggested that they attempt to manually create the profile and was disappointed when they confirmed that “802.1x” was no longer an option on the list of security types. That’s unfortunate that their earlier generations had support, and it appears to have been removed. It’s been a few years since I’ve seen one, so no idea which generation this occurred (Fire 7 is their 7th generation). I just know the 1st and 2nd generation could connect since I got to be the one to figure it out all those years ago. Christopher Johnson Wireless Network Engineer AT Infrastructure Operations & Networking (ION) Illinois State University (309) 438-8444 Stay connected with ISU IT news and tips with @ISU IT Help on Facebook<https://www.facebook.com/ISUITHelp/> and Twitter<https://twitter.com/ISUITHelp> ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
