08-15-2012 12:04 PM - edited 03-10-2019 07:25 PM
Is there anyway to get rid of the cert. warning when somebody connects to wireless or I need real certs?
Solved! Go to Solution.
08-15-2012 12:27 PM
If you disable this check the cert warning will not pop up....sometimes that pop up is not always a cert warning, its letting the user know that they are submitting their credentials to this radius server.
Thanks,
Tarik Admani
*Please rate helpful posts*
08-15-2012 12:32 PM
I understand, there isnt a way where we can change this in ISE since this is a client based security feature.
You can consider autoenrollement so that the clients get the root certificate and you can issue a group policy so that the supplicant settings are set to validate the server certificate using the internal root.
Thanks,
Tarik Admani
*Please rate helpful posts*
08-15-2012 12:06 PM
You can uncheck the validate server identity on the client. Is this for your internal users?
Thanks,
Tarik Admani
*Please rate helpful posts*
08-15-2012 12:10 PM
Yes it's for internal users not for Guest.
Unchecking that option os a possibility but they kind of dont want to see that cert thing poping up
08-15-2012 12:27 PM
If you disable this check the cert warning will not pop up....sometimes that pop up is not always a cert warning, its letting the user know that they are submitting their credentials to this radius server.
Thanks,
Tarik Admani
*Please rate helpful posts*
08-15-2012 12:28 PM
I know it wont popup, I am just saying is there anyway of disabling it in ISE because I have like 5k users
08-15-2012 12:32 PM
I understand, there isnt a way where we can change this in ISE since this is a client based security feature.
You can consider autoenrollement so that the clients get the root certificate and you can issue a group policy so that the supplicant settings are set to validate the server certificate using the internal root.
Thanks,
Tarik Admani
*Please rate helpful posts*
08-15-2012 12:39 PM
thank you.
08-15-2012 12:53 PM
I have some connect and press terminate cert and now I can't get them back on lol
08-15-2012 12:56 PM
See if you can have them remove the wireless network profile and have them reconnect to the ssid again.
Thanks
Tarik Admani
*Please rate helpful posts*
08-15-2012 01:04 PM
thanks, it worked, it happend to a manager god damn it.
08-15-2012 01:06 PM
Atleast isnt wasnt a CTO....now that would suck!
Tarik Admani
*Please rate helpful posts*
08-15-2012 01:20 PM
i know right , what about when clients hit ise they get unknown and by default rejected they have to reconnect to in order to get profiled, maybe some reauthentication?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide