BlackBerry Z10 issue with 802.1x authentication

2013-11-15 Thread Dennis Xu 
Has anyone experienced 802.1x authentication issues with Blackberry Z10/Q10? We 
have Cisco WiSMs and ACS 5.3 deployment using PEAP authentication. Recently I 
have found Z10 cannot authenticate. ACS does not have any logs for the device. 
We use Thawte certificate and all intermediate certificates are configured on 
ACS. The Z10 can connect to our open SSID. Any advices? Thanks. 

---
Dennis Xu
Analyst 3, Network Infrastructure
Computing and Communications Services(CCS)
University of Guelph

519-824-4120 Ext 56217
d...@uoguelph.ca 
www.uoguelph.ca/ccs

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Re: [WIRELESS-LAN] BlackBerry Z10 issue with 802.1x authentication

2013-11-20 Thread Dennis Xu 
As I mentioned in another thread, this issue was caused by the implementation 
of 802.11k support. We are using Cisco WISM2s version 7.4.110.0. 

Dennis


- Original Message -
From: "Dennis Xu" 
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Sent: Friday, November 15, 2013 1:27:58 PM
Subject: [WIRELESS-LAN] BlackBerry Z10 issue with 802.1x authentication

Has anyone experienced 802.1x authentication issues with Blackberry Z10/Q10? We 
have Cisco WiSMs and ACS 5.3 deployment using PEAP authentication. Recently I 
have found Z10 cannot authenticate. ACS does not have any logs for the device. 
We use Thawte certificate and all intermediate certificates are configured on 
ACS. The Z10 can connect to our open SSID. Any advices? Thanks. 

---
Dennis Xu
Analyst 3, Network Infrastructure
Computing and Communications Services(CCS)
University of Guelph

519-824-4120 Ext 56217
d...@uoguelph.ca 
www.uoguelph.ca/ccs

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Re: [WIRELESS-LAN] BlackBerry Z10 issue with 802.1x authentication

2013-11-26 Thread Adey Hobson-Merrett 

Hello,

This may help, though I would expect there to be a Twarte root Cert 
included already on the Blackberry.


EAP authentication methods that a Wi-Fi enabled BlackBerry device 
supports LEAP authentication PEAP authentication EAP-TLS authentication 
EAP-TTLS authentication EAP-FAST authentication EAP-SIM authentication
http://docs.blackberry.com/en/admin/deliverables/16648/EAP_auth_methods_that_Wi-Fi_BB_supports_845482_11.jsp 



See P122.
"To configure PEAP authentication, you must install a root certificate 
on the BlackBerry device that corresponds to
the authentication server certificate. For more information, see the 
BlackBerry Enterprise Server Administration Guide."


You may also have come across this where some Blackberries won't conect, 
we get this with eduroam and have to put these devices on an alternate 
legacy SSID.


http://btsc.webapps.blackberry.com/btsc/viewdocument.do?externalId=KB29914&sliceId=2&cmd=displayKC&docType=kc&noCount=true&ViewedDocsListHelper=com.kanisa.apps.common.BaseViewedDocsListHelperImpl 
 



Hope this helps.

Adey

On 15/11/2013 18:27, Dennis Xu wrote:

Has anyone experienced 802.1x authentication issues with Blackberry Z10/Q10? We 
have Cisco WiSMs and ACS 5.3 deployment using PEAP authentication. Recently I 
have found Z10 cannot authenticate. ACS does not have any logs for the device. 
We use Thawte certificate and all intermediate certificates are configured on 
ACS. The Z10 can connect to our open SSID. Any advices? Thanks.

---
Dennis Xu
Analyst 3, Network Infrastructure
Computing and Communications Services(CCS)
University of Guelph

519-824-4120 Ext 56217
d...@uoguelph.ca
www.uoguelph.ca/ccs

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


--
Adey Hobson-Merrett
Systems & Networks
University of Bath
+44 1225 386 047

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.