Newly imaged PC unable to connect to WiFi via EAP-TLS

St. John, Lori 0 Reputation points
2024-07-03T20:37:03.7+00:00

Newly imaged PCs are unable to connect to WiFi via EAP-TLS. The certificate gets pushed down via auto enrollment after the GPO update. We've verified the certificates, and all are present on the machine and good. We can normally fix this by manually deleting the device certificate and doing a reboot (although we have a few that are still having an issue). We are trying to get this issue fixed to keep our process automated. Anyone else experience this issue? It happens on both Windows 10 and Windows 11.

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
11,077 questions
Windows 10 Network
Windows 10 Network
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Network: A group of devices that communicate either wirelessly or via a physical connection.
2,302 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. S.Sengupta 16,776 Reputation points MVP
    2024-07-04T00:41:50.1066667+00:00

    You can use a PowerShell script to automate the removal of the certificate:

    Script to delete certificate on Windows 10 devices

    Also update Network Driver and consider recreating a Wi-Fi profile.

    0 comments
  2. Hania Lian 10,531 Reputation points Microsoft Vendor
    2024-07-05T07:24:38.1066667+00:00

    Hello,

    Here are a few possible options you could try to check:

    Verify the certificate chain: Ensure that the certificate chain is intact and valid on the client machine. Check the Root CA, intermediate CA, and device certificates to ensure they are present and not expired.

    Check certificate permissions: Ensure that the device certificate has the appropriate permissions to be used for authentication. Make sure the certificate is not marked as non-exportable and that the private key is accessible.

    Check Group Policy settings: Verify that the Group Policy settings for EAP-TLS authentication are correctly configured. Ensure that the appropriate certificate template is specified in the policy and that it is enabled for auto enrollment.

    Check certificate stores: Confirm that the certificates are present in the correct certificate stores. The device certificate should be located in the machine’s Personal certificate store.

    Reset network settings: Sometimes, resetting the network settings on the client machine can help resolve authentication issues. You can do this by opening Command Prompt with administrative privileges and running the following commands:

    netsh winsock reset

    netsh int ip reset

    ipconfig /release

    ipconfig /renew

    ipconfig /flushdns

    Update network drivers: Make sure that the network drivers on 

    Best Regards,

    Hania Lian

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments