RADIUS authentication on Windows 7

[FatBoy]

Hi all,

 

Just wondering if anyone could help as I'm having a issue with RADIUS and Windows 7 BYOD machines. I have setup RADIUS AAA authentication on Ruckus to authentic users on the SSID and this passes the RADIUS authentication though to Bloxx nicely and works on iOS, OSX and Windows 8 without an issue. It also works with windows 7 Domain computers no problem and I have a GP setup to connect domain laptops to the network automatically which works nicely. However I also want Windows 7 machines that our students bring in to connect in the same way but they just won't connect. I get the event logged below when they try to connect

 

Network Policy Server denied access to a user.

Reason Code: 265

Reason: The certificate chain was issued by an authority that is not trusted.

 

The policy on the NPS server is setup with very basic settings to allow domain computers and 3 different AD user groups to connect and the user I'm trying to connect with is a member of the group. Like I say I can connect and authentic on a window 8 laptop with the same user just not a windows 7 laptop.

Thanks

FB

[WifiWizard]

This is due to an inherent issue with Windows 7 only (Windows 8 will work fine) and certificate validation. Windows 7 does not like untrusted certificates when using PEAP authentication.

 

The validate certificate box needs to be unchecked when creating a new wireless network. I have copied a link below on how to set this up.

 

https://helpdesk.latech.edu/index.php?option=com_content&task=view&id=221&Itemid=67

 

If these are domain devices this can also be done centrally via group policy.

 

If you are seeing this issue often then it may also be advisable to buy a valid certificate that can be imported into the system to avoid this issue.

[FatBoy]

Thanks Wifi Wizard, yes we found a similar post saying the same. So so annoying that this is the case, it spoils what would be our prefect wifi setup here in having to create another wifi ssid with a different authentication just for win7 users