Skip to main content
Question

Multi user Wifi config problems with certs

A
Forum|alt.badge.img+6
  • AdamH
  • Contributor
  • 63 replies

OK,
So we have Casper giving out User Certificates via configuration profiles.
This is working great.
Our in-house WiFi uses this cert for authentication. Also great.
However, when a different network user logs into the machine, the WiFi connection is still trying to use the settings that were set by the previous user- so its failing because its looking for the other users cert in the current users keychain.
The only way we can do this now is to remove the wifi connection and re-add it under teh current user- which is convoluted for a regular user.

Anybody have any ideas how to get around this problem?

    2 replies

    A
    Forum|alt.badge.img+17
    • alexjdale
    • Contributor
    • 881 replies
    • October 3, 2013

    We abandoned user-level wireless and are running it at a system level so wifi is always active with the machine cert.

    I would recommend not using per-user certs and only using one cert for the system to avoid conflicts (Apple's 802.1x EAP-TLS implementation is pretty terrible and prone to conflicts). If you only want wifi active after login, use a login window profile.

    Do you have a requirement that would make this unworkable?

    A
    Forum|alt.badge.img+6
    • AdamH
    • Author
    • Contributor
    • 63 replies
    • October 3, 2013

    Unfortunately the per-user cert is in our environment- so its not really my choice, I just have to work around it.
    We're currently using a SCEP profile, which on its own works well, its just the issue with the WiFi settings carrying over to all the users. Having WiFi always active would certainly solve a bunch of other problems as well... but again.....

    Reply


    Most helpful members this week

    Terms & ConditionsCookie settingsAccessibility statement

    Cookie policy

    We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

     
    Cookie settings