Secure Wifi Connection Problems

[benrk]

Re: Secure Wifi Connection Problems windows 8

Hi-
I have the exact same problem here. I cannot connect (Connection unsucessful) my HTC 8x to my home network with my Netgear WPN824v3. Did anbody find a fix?

 

[sundawg#WP]

Re: Secure Wifi Connection Problems windows 8

Can you describe your wireless access point/router's security configuration? Have you tried using open (no security) just for fun?

 

[Nikhilteja]

mtmt88 - I've tried to explain that many of these cases we have at work are out of our control because MS decided to make our PEAP authentication more secure and not allow expired certs and/or certs that don't reference a CA installed on your phone. A couple things to try. Use a laptop/tablet and connect to your work wifi so you can read the cert. Check for the expiration and the see what the root CA is. If it is exprired, tell your IT to "do the needful". If cert is self-signed (i.e. you don't have the CA installed on your phone), export it from your notebook and email it to your phone so you can install it - reboot and try again.

How to read/get the certificate after connecting to that network via laptop?

 

[sundawg#WP]

How to read/get the certificate after connecting to that network via laptop?

Did you read the post following the one you quoted?

If there isn't an intranet site you can visit to get the CA (it's also possible your IT is using multiple CA's as well for different things - email, internal website, wifi, etc.), then you might be able to find it in your PC's cert manager. Open certmgr.msc. Under Trusted Root Certification Authorities you can see all of the CA's on your laptop. Look for something that has the name of your institution or company in it. Though since it is self-signed, it could be named anything. The ones I've seen often have <All> as Inteded Purposes and <None> for a Friendly Name.

Again, as in my previous post, you need to get the right CA and the actual cert. So hopefully there is an intranet page that uses the same cert path as the wifi.

Side note - glad to see in the more recent versions of Windows RT Mail that there is now a checkbox to bypass certificate validation. Now if they'd just do this for WP (maybe 8.1?)

 

[sunnybyday]

I have the same error - Connection unsuccessful: Your phone couldn't reach the Wi-Fi network abcd. The difference is that this is my Home WiFi, not office. Another interesting fact is that all other devices can connect fine - Office Thinkpad W510, my Dell Inspiron, Wife's Lumia 520 and the Surface - only my Nokia Lumia 925 has this issue. Tried deleting and adding it again, didn't work.

Any help will be appreciated - downloading big apps or even streaming uses up my data and this is driving me crazy. Sombody please help.

 

[sundawg#WP]

I have the same error - Connection unsuccessful: Your phone couldn't reach the Wi-Fi network abcd. The difference is that this is my Home WiFi, not office. Another interesting fact is that all other devices can connect fine - Office Thinkpad W510, my Dell Inspiron, Wife's Lumia 520 and the Surface - only my Nokia Lumia 925 has this issue. Tried deleting and adding it again, didn't work.

Any help will be appreciated - downloading big apps or even streaming uses up my data and this is driving me crazy. Sombody please help.

It doesn't sound like your case is certificate related. I'd suggest temporarily removing authentication from your home wifi and making it open just to see if your 925 works with the access point. Then start putting your settings back. Maybe try different channels and switching between b/g/n, etc as long as you're at it. Maybe you'll find some combination that is problematic.

 

[Arora Rohit]

well I am also facing a similar problem with my phone, I can change my router's settings... So I wanna know, what will mostly likely work for me
I am using HTC 8X and my current settings are Encryption: TKIP Protocol, Security :WPA, Profile: 802.11B/G, Authentication Method: Pre Shared Key
thanks in advance

 

[xconomicron]

Same problem here.

WPA2-Enterprise - PEAP - MS-Chapv2 - AES encryption --Well known problem at my university. Our university had trouble with the Cisco routers for WiFi on Windows 8. They upgraded the firmware on the routers to resolve the problem. -Yet WP8 still has problems.

Forgot to mention, works when certificates are installed though. -___-

 

[Jay Barker]

Yeah windows phones are just rubbish. Crashes, glitches, errors, even all the apps suck.

 

[sundawg#WP]

Yeah windows phones are just rubbish. Crashes, glitches, errors, even all the apps suck.

Windows Phones are amazing. Stable, rock solid, no errors and I have every app I need. And even the third party ones are sometimes better than the official ones.

Figured we needed another biased comment to even the last one out.

 

[sundawg#WP]

FYI - many of these Wifi woes will go away with Windows Phone 8.1. I'm using the dev preview and found a few options I haven't seen before when adding a wifi network manually.

1) Connect using: user name+password, certificate, SIM
2) Server certificate validation: none, always ask me, certificate authority
3) EAP method: PEAP MS-CHAP v2, TTLS

Number 2 has been the source of many problems for users - self-signed certs meant you had to get them and add them to your phone as I've described previously. Now, we can do like iOS and Android. Say validation 'none'. I used 'always ask me' and was presented the cert info to which I said ok. This worked.

Number 3 means there is EAP-TTLS support now. I know a few of you were waiting for this. Someone should give this a try and report back if they have dev preview.

I believe this puts WP on par with the competition...once 8.1 is generally available.

 

[borasar]

FYI - many of these Wifi woes will go away with Windows Phone 8.1. I'm using the dev preview and found a few options I haven't seen before when adding a wifi network manually.

1) Connect using: user name+password, certificate, SIM
2) Server certificate validation: none, always ask me, certificate authority
3) EAP method: PEAP MS-CHAP v2, TTLS

Number 2 has been the source of many problem - self-signed certs meant you had to get them and add them to your phone as I've described previously. Now, we can do like iOS and Android. Say none. I used always ask me and was presented the cert info to which I said ok. This worked.

Number 3 means there is EAP-TTLS support now. I know a few of you were waiting for this.

I believe this puts WP on par with the competition...once 8.1 is generally available.

yeup, i've tested 8.1 wifi at work for the first time today, connected without any issues, needed eap-ttls

 

[crimsonvspurple]

FYI - many of these Wifi woes will go away with Windows Phone 8.1. I'm using the dev preview and found a few options I haven't seen before when adding a wifi network manually.

1) Connect using: user name+password, certificate, SIM
2) Server certificate validation: none, always ask me, certificate authority
3) EAP method: PEAP MS-CHAP v2, TTLS

.

Hi.

I'm using wp8.1 dev Preview on my L1020. I can not find manual Wi-Fi ad options let alone these options.
Any ideas?

Thanks.

 

[sundawg#WP]

hey crimsonvspurple.

Under wifi settings scroll down, there should be a "manage" button. This is how you can add hidden networks. Of course you have to be in range or you won't get very far. Since I'm not in range of my corporate wifi I can't get to any of the options either.

hope that helps a little.

 

[crimsonvspurple]

aw! I don't know how I missed that + sign button. Thanks a LOT man!!

 

[blumac]

Hi,

I updated my Lumia to Windows 8.1..And its now not letting me access any of the https pages which do not have a valid certificate. While such a feature would be required on public sites, it has also brought in the unintended consequence of blocking out many pages of internal university networks. The worst part is, it has blocked out my wifi connection login page:unhappy:...I am unable to connect to the internet in our university now...Please help me connect back to the wifi...
Windows phone 8 had the option of going ahead with such websites after a security warning, but annoyingly, 8.1 doesnt seem to have that...Please help me on a way out of this problem...its really frustrating...

 

[sundawg#WP]

Have you tried turning off the SmartScreen Filter in IE's advanced settings?

Also, are you talking about 8.1 or 8.1 GDR1?

 

[blumac]

Have you tried turning off the SmartScreen Filter in IE's advanced settings?

Also, are you talking about 8.1 or 8.1 GDR1?

Its the 8.1 update for 1020 automatically available. Not the gdr...Smart screen filter didnt help solve my problem either

 

[Se7ensyns]

I have the same issue by the sounds of things. Since the rollout of Windows Phone 8.1 I can no longer connect my companies guest wifi. It used to take me to a browser screen, that I would ignore the cert error and then I could enter my corporate username and password, . now it just sits in the Wifi screen and just asks for a password with no option for user name. I have turned off smartscreen and it still doesn't work.

Any help would be appreciated.

Cheers

 

[Lucas P]

I don't know if this will help anyone else, but I finally figured out what let me connect to my Corporate Wi-Fi on my Lumia Icon. On my old LG G2, when it asked me to sign in with a username and password, I used my corporate email address and network password. Now on this phone, I had to change to using HQDOMAIN\user.name. My password was still my same network password. I turned off the check for server certificate when connecting to the Wi-Fi and selected PEAP MS-CHAP v2 as the EAP method and was able to connect to the network and the internet. I still got an error about the network certificate when i tried to connect to a https page on the intranet, but after another filling in another prompt to sign in, I was able to access the https pages also. Hope this helps someone as I haven't seen it suggested yet!