WPA TKIP IEEE 802.1x EAP MSCHAP v2 w/o Certificate?

CHfish · Joined: 18 Oct 2007 Posts: 2

Hi

I've got a WLAN with the following authentication methode:
Network Authentifiction: WPA
Encryption: TKIP
Authentifiction: IEEE 802.1x
EAP-Type: PEAP
Authentifiction Type: MSCHAP v2
Login: Username/Password/Domain

If I set my Qtek 9000 (WM5, german) to connect to that WLAN I do the
following steps (self-translated):
1. Add New
2. [On tab General] I choose the SSID and "connecting to Internet" [Next Tab]
3. [On tab Network Key] I choose the WPA as authentatication and TKIP as
encryption type [Next Tab]
4. [On tab 802.1x] I choose the EAP-Type: PEAP - and
then I try to click on "Properties" (where I assume I should be able to put
in my login credientals - but if I click on Properties I get this error
message:
WARNING.
Connection to wireless network failed. You need a personal certificate to
identify your self.

Is it impossible to connect with a WM5 device to that wireless network (with
out a personal certificate)

Thank you

Archived from group: microsoft>public>pocketpc>wireless

Eric Hicks [MVP] · Joined: 15 Aug 2007 Posts: 479

I don't believe so as that would be defeating the whole purpose of running
802.1x. Do you also have the root certificate installed on the device?
--
--
Eric Hicks [That_Kid] (MS-MVP Mobile Devices)

The MS-MVP Program - http://mvp.support. microsoft.com This posting is
provided "AS IS" with no warranties, and confers no rights...

"CHfish" wrote in message @microsoft.com...
> Hi
>
> I've got a WLAN with the following authentication methode:
> Network Authentifiction: WPA
> Encryption: TKIP
> Authentifiction: IEEE 802.1x
> EAP-Type: PEAP
> Authentifiction Type: MSCHAP v2
> Login: Username/Password/Domain
>
> If I set my Qtek 9000 (WM5, german) to connect to that WLAN I do the
> following steps (self-translated):
> 1. Add New
> 2. [On tab General] I choose the SSID and "connecting to Internet" [Next
> Tab]
> 3. [On tab Network Key] I choose the WPA as authentatication and TKIP as
> encryption type [Next Tab]
> 4. [On tab 802.1x] I choose the EAP-Type: PEAP - and
> then I try to click on "Properties" (where I assume I should be able to
> put
> in my login credientals - but if I click on Properties I get this error
> message:
> WARNING.
> Connection to wireless network failed. You need a personal certificate to
> identify your self.
>
> Is it impossible to connect with a WM5 device to that wireless network
> (with
> out a personal certificate)
>
> Thank you

CHfish · Joined: 18 Oct 2007 Posts: 2

Thank you for your answer.
The used root certificate is "GTE Cyber Trust Global Root" - it is avaiable
on the device.
I probably should add the fact that this infrastructure is an IT service of
a college - it's not really about security but about access limitation...

Philippe Schnyder

"Eric Hicks [MVP]" wrote:

> I don't believe so as that would be defeating the whole purpose of running
> 802.1x. Do you also have the root certificate installed on the device?
> --
> --
> Eric Hicks [That_Kid] (MS-MVP Mobile Devices)
>
> The MS-MVP Program - http://mvp.support. microsoft.com This posting is
> provided "AS IS" with no warranties, and confers no rights...
>
> "CHfish" wrote in message
> @microsoft.com...
> > Hi
> >
> > I've got a WLAN with the following authentication methode:
> > Network Authentifiction: WPA
> > Encryption: TKIP
> > Authentifiction: IEEE 802.1x
> > EAP-Type: PEAP
> > Authentifiction Type: MSCHAP v2
> > Login: Username/Password/Domain
> >
> > If I set my Qtek 9000 (WM5, german) to connect to that WLAN I do the
> > following steps (self-translated):
> > 1. Add New
> > 2. [On tab General] I choose the SSID and "connecting to Internet" [Next
> > Tab]
> > 3. [On tab Network Key] I choose the WPA as authentatication and TKIP as
> > encryption type [Next Tab]
> > 4. [On tab 802.1x] I choose the EAP-Type: PEAP - and
> > then I try to click on "Properties" (where I assume I should be able to
> > put
> > in my login credientals - but if I click on Properties I get this error
> > message:
> > WARNING.
> > Connection to wireless network failed. You need a personal certificate to
> > identify your self.
> >
> > Is it impossible to connect with a WM5 device to that wireless network
> > (with
> > out a personal certificate)
> >
> > Thank you
>

Use IEEE 802.1z greyed out Hi, When trying to configured WPA-PSK the option "Use 802.1x..." under tab 802.1x is greyed out. I can't deselect it. I don't want to use it. I am using HP iPAQ 6915. Anyone know how to make this option available? Regards, Ulf

Windows Mobile 5 Ipaq will not connect to WPA-PSK (TKIP) Air Hi, I have just browsed the old posts here but not found any answers. If anyone could help i would be grateful.... I have a HP Ipaq running Windows Mobile 5. I would like connect it to my wifi network using WPA-PSK and TKIP. My Mac and PC both connect eas

How to use PEAP-MSCHAP in WM5 Does the WM5 support PEAP-MSCHAP security mechanism? How can i use it.... please advice...

WM 2K3 - CCX - WEP + TKIP + Message Integrity Check (MIC) + Hello, I have a problem configuring WEP + TKIP + Message Integrity Check (MIC) + Per Packet Keying (PPK) on a WM2K3 device with a wistron 802.11b/g radio and using the Funk security supplicant. I have narrowed it down to the Cisco Compliant TKIP Features

Certificate Help Please. We have just purchased Motorola Q's from Verizon. I am running Exchange 2003 standard sp2. My people all get a certificate error when trying to use Active Sync. I have a certificate from Network Solutions. I have tried the addcert program