Windows 7 WPA2 802.1x EAP-TLS connection as host

[gggttt_789]

Hello,


We have successfully created a Wifi infrastructure with WPA2 802.1x EAP-TLS encryption.

We are able to connect various devices: Androids, iPhones, Linux systems, Windows 10 with user certificate and with host certificate.

Unfortunately, we have issues with connecting Windows 7 with host certificate, although, Windows 7 with user certificate works just fine.


For example, we have a Windows 7 Professional workstation with such configuration:

Computer Name: some-name

Full Computer Name: some-name

Domain: CONTOSO


We were creating client certificates with fallowing CN values:

- some-name,

- host/some-name,

- host/some-name.contoso.pl,

Apart from "some-name" version for user certificate, none of them worked properly. In Event Log (Microsoft-Windows-WLAN-AutoConfig/Operational

we found such error only:

Explicit EAP failure received

and

Authentication failed because the user certificate required for this network is invalid.


In comparison while we were configuring certificate for Windows 10 we used certificates with CN values:

- some-name for user certificate,

- host/some-name.contoso.pl for host certificate.

Both worked just fine.


Any idea what kind of issue we may encounter here? Why Windows 7 does not accept it's client-certificate?

Is it possible to debug this problem client-side or enable some additional more verbal logs?


Thank you in advance,

Grzegorz

Continue reading...