Exa & Android

[cherd84]

Hi all,

 

Does anyone know if an Android device needs to be up to a particular version number in order to accept a certificate from Exa in order to access the internet? I'm supporting a primary with several Samsung Galaxy A01 tablets running on Android version 8.1.

 

I've installed Exa's certificate from a link they provided. No proxy settings are entered as per their instructions but still get the 'Connected - No internet' message on each tablet.

 

For posterity, they connect to the internet fine on a non-Exa internet connection.

 

Currently awaiting a reply from their support team, hence the post here.

 

Thanks

[foofighterjim]

Possibly a long shot but how long is the certificate valid for?

 

I had this issue a little while ago and it was due to our SSL certificate (Smoothwall), it was an old one that was valid for 3 years, Google and Apple have stopped trusting long life certificates.

 

Otherwise, could be that the site they are trying to poll is blocked?

[cherd84]

It's a long term one. I believe it expires in 2036.

 

I tried removing and readding the certificate also as per their advice. It can connect enough to download and install it but no joy when it comes to accessing the internet after that. Definitely to do with these devices though. They've a couple ipads that use the same cert which work without issue.

[foofighterjim]

Not as up to date as the article I read earlier in the year but: https://www.zdnet.com/article/google-wants-to-reduce-lifespan-for-https-certificates-to-one-year/

[JOrdan01070]

We have EXA here and the only way to get it to work was to set a static IP for the device and get support to put an external IP rule for the static IP

[cherd84]

Cool. Thanks @JOrdan01070 I'll give them a ring (seeing as they haven't called me back yet!).

[meakjoe]

I had an issue similar to this with Lenovo Android tablets and EXAs certificate through Intune not working properly.

 

If you right clicked on the certificate from a PC and opened the cert with notepad, it was all mumbo jumbo and not a proper certificate format like they normally are with a 'BEGIN REQUEST' and 'END REQUEST'.

 

Importing the cert to a PC and exporting as a Base-64 certificate then displayed it as the right format through Notepad, and worked succesfully on the Android tablets. Might be worth trying.

[cherd84]

Sorted this. It seems that the teachers tried a few times to install the certificate. There appeared to be multiple instances of the same certificate in the 'User Certificates' section. I cleared them out and started from scratch, as soon as I installed it onto a clean slate, so to speak, it just worked.