Apple TV 802.1x Apple Configurator

[AV_IT_]

So Apple TVs with latest update (5.1) are supposedly able to connect to wireless and through proxy servers using 802.1x. This is possible by uploading a Profile through Apple Configurator.

 

support.apple.com/kb/HT5438

 

Has anyone got this to work? My profile which includes credentials, passwords and proxy server info works perfectly on iPads, you don't have to accept certificates, but the same profile will not work on Apple TVs.

 

Very frustrating. Any ideas?

[kennysarmy]

Hi

 

I can't even get AppleTV's to sync with a very basic "profile" - I get "device not responding" after a while of it looking like it's going to work....

[Rozzer]

In the end to get around radius I have setup a new hidden sid just for the apple tvs. Bit of a lazy way but does the trick.

 

This can then be pushed with the Apple Configurator.

 

Ross

[AV_IT_]

Thanks for your reply Ross, perhaps this is the only way forward for now.

[AV_IT_]

Does anyone know how you can change the trusted server certificate names? You can edit them but it won't let you save them in? Perhaps this could be why ATV won't connect with enterprise settings!?

[AV_IT_]

You can do this by importing a profile from iPhone Config tool. Unfortunately it does not appear to help in any way!

[RTFM]

In the end to get around radius I have setup a new hidden sid just for the apple tvs. Bit of a lazy way but does the trick.

 

This can then be pushed with the Apple Configurator.

 

Ross

 

This may sound a stupid question but dont devices need to be on the same SSID to connect to the apple TV?

 

How do you do this if the SSID the Apple TV is on is hidden?

 

Sorry, maybe i'm misinformed?

[Rozzer]

You are right but I have setup a seperate BYOD wireless network which is on WPA2 which is only assisgned to mobile devices and Apple tvs.

 

Ross

[AV_IT_]

Reason Apple TV won't connect with 802.1x is that ATV time is automatically set on start up (which fails as no ip address) and so certificates are out of date. The only way around is to connect to a network with port 123 (which sets time) open, reload profile and then restart ATV which now has correct time.

 

Does anyone know how to set the time and date manually on ATV? I can't seem to find an answer..

[darrenstraight]

Been trying myself to get a proxy onto an Apple TV (To allow time update / activation / itunes access etc).

 

However the Apple Configurator just doesn't want to allow us to have a proxy on the device!

 

I managed to get passed the "device not responding" part by turning the Apple TV on first without the micro usb cable plugged in and then keep pressing menu button to by pass the time update / activation etc until the light stops blinking on the Apple TV, then plugin in the USB Cable and go through the prepare device process on the configurator.

 

Unfortunately neither global proxy (ensuring its a supervised device) or WiFi Proxy actual seem to apply once the device says it's done and you try to let it update time / activate etc.

 

If anyone does end up finding a solution, please do tell.

[AV_IT_]

I did get the ATV to work going through our proxy but you have to first join the ATV to a network which will allow it access to set time (I used a 3G MiFi). Then go to settings menu, add the profile with Apple configurator, make sure you have set time to London and restart. The ATV should now connect through a proxy to an enterprise network as the correct time will allow certificates to be accepted.

 

I haven't looked into Global Proxies but can assure you that the WiFi proxy is working for us.

 

Problem is if someone turns the ATV off you have to go through this again. It's not really a workable solution!

Edited October 19, 2012 by AV_IT_

[AceDaz]

I'm struggling with getting the Apple TVs working through LGfL proxies, or ours for that matter. It seems to cause 400 Bad Request and 302 Temporally moved errors in our TMG logs.

 

Tried directly out to LGfL proxies and also using a squid proxy.

 

Anyone for any ideas?

[mattpant]

Hi Guys,

 

Has anybody got anywhere with this issue? I'm trying to set the proxy using a profile created in Configurator on the MacBook and sync'ed to the Apple TV, I'm getting the same issue as AV_IT_ mentioned where by I have to set up the device using a non-proxied Internet connection to set the time, I then connect to the mac to download the profile, sometime the Internet proxy then works after a restart (sometimes it doesn't) but then went its switched off and back on it just won't connect to the Internet, as if its loosing the proxy settings! The profile still shows as being installed under the general menu on the Apple TV, and my WiFi settings are still in place, so it's connected to the school network. I've today spoken to Apple who have said it sounds like its faulty and have said to get it swapped out with a replacement, but I've got my doubts on it being faulty!!

 

Any news or fixes/solutions would be great!

 

Thanks

 

Matt

[AceDaz]

I have given up trying to activate the Apple TVs through the school network for now.

 

I have noticed that Apple have updated the Configurator and I am struggling with Profiles

[Sean-OC04]

Sorry but I really can not understand why these have to be connected to the internet?

 

You don't need internet connectivity to mirror from an iPad and the features when to do get it connected are to be frank fairly basic?

[AceDaz]

Sorry but I really can not understand why these have to be connected to the internet?

 

You don't need internet connectivity to mirror from an iPad and the features when to do get it connected are to be frank fairly basic?

 

No but it needs Internet to set the time when first turned on and to update the software

[mattpant]

I've had a bit of success today on this and got it working!

 

After a number of phone calls to Apple, it turns out that when the Apple TV is first booted up, it checks in with the Apple Time Server (time.apple.com or time.euro.apple.com) this MUST go straight out to the internet using port 123.

 

I spoke to our LEA, who have configured a rule on our firewall for access to Port 123 for the sites time.apple.com and time.euro.apple.com, so now, when the Apple TV is switched on, it can do a time check with the Apple server, and then it can use the Internet using the proxy settings that were installed using the profile with Configurator.

 

So, if anybody else is having the issue, ask your LEA if they can add a rule on your firewalls to allow direct access to the Apple Time Servers on port 123

 

Hope it helps a few of you out!

 

Matt

[AceDaz]

Hi Matt

 

Who is your LEA?

 

Thanks

 

I've had a bit of success today on this and got it working!

 

After a number of phone calls to Apple, it turns out that when the Apple TV is first booted up, it checks in with the Apple Time Server (time.apple.com or time.euro.apple.com) this MUST go straight out to the internet using port 123.

 

I spoke to our LEA, who have configured a rule on our firewall for access to Port 123 for the sites time.apple.com and time.euro.apple.com, so now, when the Apple TV is switched on, it can do a time check with the Apple server, and then it can use the Internet using the proxy settings that were installed using the profile with Configurator.

 

So, if anybody else is having the issue, ask your LEA if they can add a rule on your firewalls to allow direct access to the Apple Time Servers on port 123

 

Hope it helps a few of you out!

 

Matt

[mattpant]

Hi Matt

 

Who is your LEA?

 

Thanks

 

I've sent you a PM

[pourzaj01]

I appreciate I'm a bit late to the party with this one..... I'm trying to set up an Apple TV to airplay to and mirror. I've managed to connecting it to our proxied WiFi network ok, but I've had no luck with trying to airplay / mirror an apple device as their isn't the option to do so! I've spoken with our internet provider (yhgfl) and unblocked all ports i believed were necessary (see below) but this doesn't seem to have helped. Both Apple TV and iPad are connected to the same WiFi network, but neither are able to see each other it seems.

 

Jay