AppleTV and 802.1X Wireless

[ianfoggo]

Hi

I am trying to get an AppleTV onto our 802.1X wireless network. I know there have been many problems in the past with date and time but from what i can gather, this has now been resolved with new versions of TVOS. The ATV I am working with is on 8.4.1.

 

I am trying to connect to Microsoft NPS on 2012 R2. I can see the request come to the NPS server but is then rejected with error 23 (An error occurred during the Network Policy Server use of the Extensible Authentication Protocol (EAP). Check EAP log files for EAP errors). Unless there are more logs which i am not looking at, I cant see any obvious errors. The certificate signing the connection is from JISC Certificate service and i have deployed the Intermediate and Root to the ATV and chosen them as trust. The user account configured for the ATV is working and valid as I can use it to connect from the Mac Mini to the Wifi with no problems.

 

I have created a test 2012 server with a new NPS running certificate generated from our private enterprise CA but still get error 23. I can only presume from that, that i have done something wrong twice!

 

Fingers crossed if someone can point me in the right direction?

 

Ian

[Guest obsidianpillar]

Hi, We use an Apple TV at home here in our home environment with WPA2 Enterprise authentication coming from a NPS Server running 2012 R2 (overkill, I know!). We created a self-assigned certificate which we deployed with Apple Configurator and did all the usual prerequisite stuff such as creating a new policy and deploying it. I created a generic Apple TV account for authentication and added it into the "802.11x" security group we created when we first set the RADIUS authentication up. We had to export the certificate and then import it into Apple Configurator to deploy it. Under NPS have you selected "User and Computer authentication"? I have always had this set at this and has worked fine with us. Could you take a screenshot of what you've deployed via Apple Configurator and then I can compare it with my configuration to see what we're doing different?

 

Best,

Tom

Edited April 12, 2016 by obsidianpillar
Grammar Error