Wireless Access

Has anyone seen this error and is there a fix

 

Continue connecting? If you expect to find "my ssid" in this location, go ahead and connect. Otherwise it may be a different network with the same name. Show the certificate details?

This is not a lot of information.

I suppose that you see this when connecting to a 802.1x SSID using a Windows device.

This is a normal behavior unless you configure the wireless network manually at the client. When you configure the SSID manually you can set the certificate validation correctly which is advisable.

Normally you want to deploy the network settings using a GPO.

Yes the OS is windows 10 and yes they have been set to auto connect to a certain SSID by GPO, but it fails to connect because of the error I indicated. But you can tell it to connect any way and it does. We are autheticating by using and NAP server that uses the AD credentials for authentication. I am brand new to wireless so I am not sure what to looks at or anything 

I suppose that you mean NPS instead of NAP as authentication server.

This error means that the client is doing certificate validation but the settings are not correct. Make sure you trust the root ca of the radius server certificate in the SSID profile of the client.

Also enable to option “connect to this servers” and enter there the common name of the certificate. This is very important if your radius server is using a public signed certificate.

Next to that, it’s advisable to enable the option “do not prompt user to authorize new servers or trusted certification authorities”. This will prevent users to connect to a fake network.

where do I do this "Also enable to option “connect to this servers” and enter there the common name of the certificate"

I see a trusted root CA on the machines but how do I know if it trusts the root ca of the radius server certificate? 

where do I do this "Next to that, it’s advisable to enable the option “do not prompt user to authorize new servers or trusted certification authorities?"

You can configure this in the GPO or wireless network properties.

Check your radius server for the certificate

for what certificate? How do  I know if its the one I need

The cert is configured in the radius server

I took the server cert from the radius server installed it on my pc and it did not resolve the issue

It looks as thought validate server certificate is disabled in the  GPO