802.1x credentials failure with ACS 5.2

[deolayusuf]

Hi all,

I recently tried to deploy an ACS appliance with version 5.2 installed on it for a customer.

After setting up the WLC to use the ACS as a radius server, and successfully testing connection from the ACS to the AD,

I get an error message " 12321 PEAP failed SSL/TLS handshake because the client rejected the ACS local-certificate" anytime a client tries to connect to the network.

This is surprising because I had already generated a certficate for the ACS from a CA and binded the CA signed certificate with the ACS, I also specified the CA in the client machine's wireless properties and checked the "validate certificate" button.

When I tried to connect using the internal identity store, the client was successfully authenticated without any certificate issues.

Any help on this will be appreciated.

[Tarik Admani]

Hi,

Can you please send me the pdf output of the authentication for the user which passes authentication to the internal identity store and for the user account that fails when pointing to AD? Are you using an identity sequence or are you modifying the identity settings? If it is ok please attach it to your next post. If not please PM me and i can setup a share for you to upload the files to securely.

thanks,

Tarik