Multi user Wifi config problems with certs

[AdamH]

OK,
So we have Casper giving out User Certificates via configuration profiles.
This is working great.
Our in-house WiFi uses this cert for authentication. Also great.
However, when a different network user logs into the machine, the WiFi connection is still trying to use the settings that were set by the previous user- so its failing because its looking for the other users cert in the current users keychain.
The only way we can do this now is to remove the wifi connection and re-add it under teh current user- which is convoluted for a regular user.

Anybody have any ideas how to get around this problem?

[alexjdale]

We abandoned user-level wireless and are running it at a system level so wifi is always active with the machine cert.

I would recommend not using per-user certs and only using one cert for the system to avoid conflicts (Apple's 802.1x EAP-TLS implementation is pretty terrible and prone to conflicts). If you only want wifi active after login, use a login window profile.

Do you have a requirement that would make this unworkable?

[AdamH]

Unfortunately the per-user cert is in our environment- so its not really my choice, I just have to work around it.
We're currently using a SCEP profile, which on its own works well, its just the issue with the WiFi settings carrying over to all the users. Having WiFi always active would certainly solve a bunch of other problems as well... but again.....