Oki C9600n Additional OkiLAN 510w Troubleshooting - Page 13

EAP Authentication Failure

Page 13 highlights

EAP Authentication Failure ᮣ Certificate Import Fails: An error occurs when importing client certificates for EAP authentication and the import fails. Possible Cause Suggested Solution(s) The client certificate file format is incorrect. Redistribute the client certificate files in the .der or .pem format from the certificate distribution source. No secret key is included in Redistribute it from the certificate distribution the client certificate. source in a format not including a secret key in the client certificate file. Certificate hash algorithms Reissue certificates using the MD5 or SHA1 hash are not supported. algorithms from the certificate issuance source. No Client Authentication has been set in the Extended Key Usage attribute of the certificate. Reissue certificates set with Client Authentication from the certificate issuance source. (Client Authentication is normally set for certificates issued for EAP authentication of a wireless LAN) Certificate key sizes are not Reissue certificates generated by either the 512, supported. 1024, 2048 or 4096 bit key size from the certificate issuance source. The certificate file is too big. Exceeding the size is not an import error for regular certificate files. The certificate file may be incorrect or the multiple certificates, such as a certificate chain, may be included. Reissue the certificate from the certificate issuance source. 13 EAP Authentication Failure

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15

13
EAP Authentication Failure
EAP Authentication Failure
±
Certificate Import Fails:
An error occurs when importing client
certificates for EAP authentication and the import fails.
Possible Cause
Suggested Solution(s)
The client certificate file
format is incorrect.
Redistribute the client certificate files in the .der
or .pem format from the certificate distribution
source.
No secret key is included in
the client certificate.
Redistribute it from the certificate distribution
source in a format not including a secret key in
the client certificate file.
Certificate hash algorithms
are not supported.
Reissue certificates using the MD5 or SHA1 hash
algorithms from the certificate issuance source.
No Client Authentication has
been set in the Extended
Key Usage attribute of the
certificate.
Reissue certificates set with Client Authentication
from the certificate issuance source.
(Client
Authentication is normally set for certificates
issued for EAP authentication of a wireless LAN)
Certificate key sizes are not
supported.
Reissue certificates generated by either the 512,
1024, 2048 or 4096 bit key size from the
certificate issuance source.
The certificate file is too big.
Exceeding the size is not an import error for
regular certificate files.
The certificate file may be
incorrect or the multiple
certificates, such as a
certificate chain, may be
included.
Reissue the certificate from the certificate
issuance source.