topic Re: Zero IT Cert Issue in ZoneDirector

Zero IT Cert Issue

david_bateman_6 — Tue, 06 May 2014 12:38:26 GMT

Hello,

I've been doing some digging and haven't found anything for what we are having.

Our users used to be able to go to the activation page in ZD, download the Prov.exe, and after running it they would be good to go.

However now they download the Prov.exe and it runs but when they connect to the WLAN it times out and in the ZD it just shows as the user having a mac of all 00's.

Anyone know of this issue or any idea's what could have caused it? It used to work just last week.

Our ZD is running version 9.7.0.0 build 220.

Thanks!

Re: Zero IT Cert Issue

monnat_systems — Tue, 06 May 2014 15:13:33 GMT

Hello David,

00:00...... mac address shows up when client has not executed the Prov.exe successfully. with limited info, would like to ask the following:

Is it happening on Mobile device or Laptop?
Is it happening with specific type of device or OS?
If i recall correctly, on win laptop, while executing, prov.exe shows logging while processing happens, if you see this too on Win Laptop, please take a look there for hints.

i hope this helps.

Re: Zero IT Cert Issue

keith_redfield — Tue, 06 May 2014 15:21:22 GMT

And what changed between the time it was working and now?

Re: Zero IT Cert Issue

david_bateman_6 — Tue, 06 May 2014 16:54:54 GMT

Hey All,

We only use the Zero IT config for our laptops. They are running Windows 7 32bit.

Below is the log from the Prov.exe and it says its completed successfully; but we are still unable to connect to them.

And we haven't made any changes since we last set a department up on wireless. The existing users who were set up last time are still able to connect to it with the certs.

Info: Checking Windows version...
Info: Windows 7 platform
Info: Checking User Privilege ...
Info: Loading wireless configurations ...
Info: 1 profiles loaded
Info: Preparing profile for 'dcwifi' WLAN
Info: Preparing certificate 'C:\Users\dbateman\AppData\Local\Temp\certificate.pfx'
Info: Searching wireless adapters ...
Info: Wireless Adapter 'Intel(R) Centrino(R) Advanced-N 6235' found. GUID=10740a2e-51bf-40d6-827a-a740a1cbff77
Info: Preparing configuration...
Info: Your personal certificate has been created. Click OK to install it.
Certificate Import Wizard will be launched. Please accept the default settings until it is finished.
Info: Configuring your wireless access - 'dcwifi' WLAN ... Done
Info: Configuration completed. Click 'Close' to finish

Re: Zero IT Cert Issue

monnat_systems — Wed, 07 May 2014 10:44:05 GMT

Hi David Bateman,

above logs looks ok. My hunch IS that its a AP-client connectivity issue...i have listed few questions to look at:

1. Select any Random AP for a quick test and see if this Windows 7 32bit laptop able to connect ok on any other WLAN like guest WLAN or non- Zero IT WLAN?
2. what does the Events/Activities says for this client when it fails:

http://prntscr.com/3gzio8

Re: Zero IT Cert Issue

david_bateman_6 — Wed, 07 May 2014 11:35:55 GMT

Ok so here is an update. When I try to connect with the Zero IT WLAN nothing shows up in the events/activities. But the AP I am connecting do does see me. See attached)

But it shows that I'm not pulling an IP.

When I connect the laptop to a different WLAN that does not use Zero IT and is on the same AP it does connect and works fine. That leads me to believe its something with the certificates that are being issued by ZD.

I also verified and the Zero IT WLAN is on the correct VLAN.

Re: Zero IT Cert Issue

keith_redfield — Fri, 09 May 2014 22:46:07 GMT

Check the certificate chain and in particular the intermediate cert. https://support.ruckuswireless.com/an...

Re: Zero IT Cert Issue

david_bateman_6 — Mon, 12 May 2014 14:22:04 GMT

I check the certificate chain and there is no intermediate cert.

It does say that the user Certificate has an invalid signature. Could that have something to do with the issue? Could the ZD be messing up with the cert generation?