topic Re: IOS - Invalid_PMKID in Wireless

IOS - Invalid_PMKID

Raphael_L — Wed, 23 Feb 2022 19:58:56 GMT

Hi,

We have recently configured a SSID using 802.1X and 802.11r is enabled.

Upon looking at all the connection logs and keeping an eye on the Wireless Health , I have been able to observe that we are now having lots of events of that type :

auth_mode='wpa2-802.1x' ft='1' reason='invalid_pmkid' radio='1' vap='0' channel='40' rssi='36'

We are using MR36 and the firmware version tested are 27.7.1 and 28.5.

Most of these logs are from mobile IOS devices running IOS 12+++. Dashboard says the devices are 802.11r capable.

1- Do you think that 802.11r in adaptive mode will help ?

2- I have noticed that 28.6 seems to have fixed issues with pmk , I might try that one.

Has anyone come across that ?

Thanks ,

Re: IOS - Invalid_PMKID

Raphael_L — Wed, 27 Apr 2022 17:58:19 GMT

Bumping my thread. Any Wifi guru here ?

28.6 didn't ''fix'' this issue. Some phones are OK , some are plagued with that error

Thanks ,

Re: IOS - Invalid_PMKID

Raphael_L — Mon, 18 Jul 2022 19:20:11 GMT

Still no luck with 28.6 nor 28.6.1 ( the code is identical to 28.6 ) Going to test 29.1 soon..

Re: IOS - Invalid_PMKID

ESMichal — Thu, 04 Aug 2022 07:33:27 GMT

We are seeing the same issue on our network with Macs (Everything up-to-date Monterey). Some of them use 802.11r without an issue but with others we see quite a lot `invalid_pmkid` errors in Meraki connection log.

Re: IOS - Invalid_PMKID

Raphael_L — Thu, 04 Aug 2022 12:07:33 GMT

Hi !

Have you tried messing with 802.11r ? Enabled , Adaptive ?

Re: IOS - Invalid_PMKID

ESMichal — Thu, 04 Aug 2022 12:09:36 GMT

We have it set to enabled. We observe PMKID errors mostly with first gen M1 machines which should support 802.11r.

Re: IOS - Invalid_PMKID

Raphael_L — Thu, 04 Aug 2022 12:14:11 GMT

We currently only have iphones and ipads. I will have to try to set it to adaptive.

Re: IOS - Invalid_PMKID

WB2 — Mon, 08 Aug 2022 06:58:43 GMT

Have you tried running 802.11r in adaptive mode as originally proposed? This was something created between Cisco & Apple so iPhones should support that with no issues

Re: IOS - Invalid_PMKID

Raphael_L — Mon, 08 Aug 2022 16:28:58 GMT

Currently testing it. I'm on a 3 weeks vacation so I will have to follow up that issue when I come back. Will keep this thread updated

Re: IOS - Invalid_PMKID

MicJameson1 — Thu, 25 May 2023 15:59:42 GMT

Hi folks. This issue is especially seen in Apple devices. I can tell you that in the past I have fixed this symptom by upgrading the firmware in the endpoint devices.

Hope this helps.

-J. Maxwell, CCNP Enterprise

Re: IOS - Invalid_PMKID

BaiGanio — Wed, 14 May 2025 16:41:40 GMT

We have the same issue with 30.7.1. Oddly, it impacts indiscriminately Android and iPhone based off the logs. Issue appeared when the software was upgraded. Are there regression defects known in this release?