cancel
Showing results for 
Search instead for 
Did you mean: 

Zero IT Cert Issue

david_bateman_6
New Contributor II
Hello,

I've been doing some digging and haven't found anything for what we are having.

Our users used to be able to go to the activation page in ZD, download the Prov.exe, and after running it they would be good to go.

However now they download the Prov.exe and it runs but when they connect to the WLAN it times out and in the ZD it just shows as the user having a mac of all 00's.
Image_ images_messages_5f91c3e7135b77e2478d96f4_8f2cccbcd63749f477cbc679d35bd741_Ruckus_inline-9e931a24-0be3-4991-80a1-44821705deac-586313356.png1399379852

Anyone know of this issue or any idea's what could have caused it? It used to work just last week.

Our ZD is running version 9.7.0.0 build 220.

Thanks!
7 REPLIES 7

david_bateman_6
New Contributor II
Ok so here is an update. When I try to connect with the Zero IT WLAN nothing shows up in the events/activities. But the AP I am connecting do does see me. See attached) Image_ images_messages_5f91c415135b77e247954139_0e804e1a6520df48c4c85f9fd02c8dd4_Ruckus_Client_inline-50e35cbe-fe93-4ece-90fd-805a9b8d9318-596573304.png1399462378

But it shows that I'm not pulling an IP.

When I connect the laptop to a different WLAN that does not use Zero IT and is on the same AP it does connect and works fine. That leads me to believe its something with the certificates that are being issued by ZD.

I also verified and the Zero IT WLAN is on the correct VLAN.

keith_redfield
Valued Contributor II
Check the certificate chain and in particular the intermediate cert. https://support.ruckuswireless.com/an...

david_bateman_6
New Contributor II
I check the certificate chain and there is no intermediate cert. Image_ images_messages_5f91c416135b77e2479579a7_2fa93d85960a8ea2f651df1c02f5c5e7_Cert_Issue02_inline-6eae6e63-ec5b-48c8-baf0-c740da56460d-289120837.png1399904261

It does say that the user Certificate has an invalid signature. Could that have something to do with the issue? Could the ZD be messing up with the cert generation?