Zero IT Cert Issue

  • 2
  • Question
  • Updated 4 years ago
Hello,

I've been doing some digging and haven't found anything for what we are having.

Our users used to be able to go to the activation page in ZD, download the Prov.exe, and after running it they would be good to go.

However now they download the Prov.exe and it runs but when they connect to the WLAN it times out and in the ZD it just shows as the user having a mac of all 00's.


Anyone know of this issue or any idea's what could have caused it? It used to work just last week.

Our ZD is running version 9.7.0.0 build 220.

Thanks!
Photo of David Bateman

David Bateman

  • 4 Posts
  • 0 Reply Likes

Posted 4 years ago

  • 2
Photo of Monnat Systems

Monnat Systems, AlphaDog

  • 776 Posts
  • 163 Reply Likes
Hello David,

00:00...... mac address shows up when client has not executed the Prov.exe successfully. with limited info, would like to ask the following:

Is it happening on Mobile device or Laptop?
Is it happening with specific type of device or OS?
If i recall correctly, on win laptop, while executing, prov.exe shows logging while processing happens, if you see this too on Win Laptop, please take a look there for hints.

i hope this helps.
Photo of Keith - Pack Leader

Keith - Pack Leader

  • 860 Posts
  • 51 Reply Likes
And what changed between the time it was working and now?
Photo of David Bateman

David Bateman

  • 4 Posts
  • 0 Reply Likes
Hey All,

We only use the Zero IT config for our laptops. They are running Windows 7 32bit.

Below is the log from the Prov.exe and it says its completed successfully; but we are still unable to connect to them.

And we haven't made any changes since we last set a department up on wireless. The existing users who were set up last time are still able to connect to it with the certs.

Info: Checking Windows version...
Info: Windows 7 platform
Info: Checking User Privilege ...
Info: Loading wireless configurations ...
Info: 1 profiles loaded
Info: Preparing profile for 'dcwifi' WLAN
Info: Preparing certificate 'C:\Users\dbateman\AppData\Local\Temp\certificate.pfx'
Info: Searching wireless adapters ...
Info: Wireless Adapter 'Intel(R) Centrino(R) Advanced-N 6235' found. GUID=10740a2e-51bf-40d6-827a-a740a1cbff77
Info: Preparing configuration...
Info: Your personal certificate has been created. Click OK to install it.
Certificate Import Wizard will be launched. Please accept the default settings until it is finished.
Info: Configuring your wireless access - 'dcwifi' WLAN ... Done
Info: Configuration completed. Click 'Close' to finish
Photo of Monnat Systems

Monnat Systems, AlphaDog

  • 776 Posts
  • 163 Reply Likes
Hi David Bateman,

above logs looks ok. My hunch IS that its a AP-client connectivity issue...i have listed few questions to look at:

1. Select any Random AP for a quick test and see if this Windows 7 32bit laptop able to connect ok on any other WLAN like guest WLAN or non- Zero IT WLAN?
2. what does the Events/Activities says for this client when it fails:

http://prntscr.com/3gzio8
Photo of David Bateman

David Bateman

  • 4 Posts
  • 0 Reply Likes
Ok so here is an update. When I try to connect with the Zero IT WLAN nothing shows up in the events/activities. But the AP I am connecting do does see me. See attached)

But it shows that I'm not pulling an IP.

When I connect the laptop to a different WLAN that does not use Zero IT and is on the same AP it does connect and works fine. That leads me to believe its something with the certificates that are being issued by ZD.

I also verified and the Zero IT WLAN is on the correct VLAN.
Photo of Keith - Pack Leader

Keith - Pack Leader

  • 860 Posts
  • 51 Reply Likes
Check the certificate chain and in particular the intermediate cert. https://support.ruckuswireless.com/an...
Photo of David Bateman

David Bateman

  • 4 Posts
  • 0 Reply Likes
I check the certificate chain and there is no intermediate cert.

It does say that the user Certificate has an invalid signature. Could that have something to do with the issue? Could the ZD be messing up with the cert generation?