802.11 - 802.1x using eap-tls

[Bruce Backus]

Has anyone got eap-tls working in SP2?

Was working in SP1, but now with SP2 a no go. Have verified the hardware
with XP Home and XP Pro and included every component I can think of that
would make a difference. Looking like I'm going to have to capture every
packet to the access point to see what's going on.

SP1 had the little problem of having to enable User Interface/Show
Notifications on Task Bar to get 802.1x to work, wondering if there is
something in SP2 I'm missing.

Thanks,

Bruce Backus

 

[KM]

Bruce,

Has anyone got eap-tls working in SP2?

Was working in SP1, but now with SP2 a no go. Have verified the hardware with XP Home and XP Pro and included every component I
can think of that would make a difference. Looking like I'm going to have to capture every packet to the access point to see
what's going on.

Just in case, make sure "Wireless zero configuration" component is in your image.
Also, analyze SetupApi.log.

SP1 had the little problem of having to enable User Interface/Show Notifications on Task Bar to get 802.1x to work, wondering if
there is something in SP2 I'm missing.

This is a bit unrelated but still worth to mention. Here is what XPe SP2 Rel.Notes says: "Notifications of Bluetooth events like
bonding, connection over PAN, and new device, do not appear unless the Tray Icon Add/Remove Support component is added to the
runtime and the Show Notifications on Task bar check box is selected in the User Interface Core component settings.".

KM

 

[Bruce Backus]

Just in case, make sure "Wireless zero configuration" component is in your

image.

Its there alright - In fact the image is just an upgraded SP1 image with a
few of the SP2 goodies added to it. In the SP1 image, eap-tls did work. In
the SP2 image anything less (on the security scale) than eap does work.

Also, analyze SetupApi.log.

Some errors in the line of;

#E089 Failed to load the OLE Control "C:\WINDOWS\system32\ipsecsnp.dll".
Error 126: The specified module could not be found.
#E291 Failed to register OLE server "C:\WINDOWS\system32\ipsecsnp.dll".
Error 126: The specified module

but nothing that would be seemed to be tied to eap-tls troubles.

This is a bit unrelated but still worth to mention. Here is what XPe SP2
Rel.Notes says: "Notifications of >Bluetooth events like bonding,
connection over PAN, and new device, do not appear unless the Tray Icon
Add/Remove Support >component is added to the runtime and the Show
Notifications on Task bar check box is selected in the User Interface Core

Not unrelated in SP1, if it couldn't display the popups, it didn't work,
something that MS was looking at fixing in SP2.

Bruce

 

[KM]

Bruce,

Its there alright - In fact the image is just an upgraded SP1 image with a
few of the SP2 goodies added to it. In the SP1 image, eap-tls did work. In
the SP2 image anything less (on the security scale) than eap does work.

Just in case, make sure to completely turn the SP2 Firewall off.

Some errors in the line of;

#E089 Failed to load the OLE Control "C:\WINDOWS\system32\ipsecsnp.dll".
Error 126: The specified module could not be found.
#E291 Failed to register OLE server "C:\WINDOWS\system32\ipsecsnp.dll".
Error 126: The specified module

Make sure "IP Security Services" and "IP Security Tools and User Interface" components are in your image.

but nothing that would be seemed to be tied to eap-tls troubles.

The IPSec could be related, actually.

Not unrelated in SP1, if it couldn't display the popups, it didn't work,
something that MS was looking at fixing in SP2.

Yup. I even remember that discussion here, in this NG. And I recall someone from Microsoft was saying it is going to be fixed in
SP2.
That might have gotten fixed for other components but not for Bluetooth. But I guess the Rel.Note is always a cure.

 

[Bernhard]

Bruce,

did you enable tracing for eapol on the XPe clients and check the trace
logs?
(<http://download.microsoft.com/downl...d67-15e3d186f38e/PRO/WiFi_Troubleshooting.doc>)

May be a comparison between the logs on SP1 and SP2 gives you a hint
about whats going wrong...

Bernhard

 

[YaronM]

Hi,

I've been able to use wireless connection in XPe SP2 to 802.11b (11MB) and
802.11g (54MB) to a secured network
that uses PEAP (Protected EAP) and certificates for authentication.
You need the new "Network Provisioning Service" and the "Wireless Zero
Configuration Service".
Also, make sure your device is properly configured in Device Manager.

Good luck!

YaronM

 

[Bruce Backus]

Thanks,

Didn't have the "Network Provisioning Service" in the image and with adding
it that seems to do the trick.

Bruce

Hi,

I've been able to use wireless connection in XPe SP2 to 802.11b (11MB) and
802.11g (54MB) to a secured network
that uses PEAP (Protected EAP) and certificates for authentication.
You need the new "Network Provisioning Service" and the "Wireless Zero
Configuration Service".
Also, make sure your device is properly configured in Device Manager.

Good luck!

YaronM

<<snip>>