Hello,

we are facing an issue with windows 8.1 using 802.1x EAP-TLS authentication, before upgrading to 8.1 (running 8) it was working fine with no issues, now after some clients upgraded to 8.1 they are not able to authenticate and always shows "timeout" in the RADIUS Server, those clients were 100% working fine with window 8 and all the other windows versions are working fine. we have re installed the client and root certificate again, when trying to access it asks to choose the client certificate and we are choosing the correct one which proves that it is installed and available (this is in machines having multiple client certificates like mine) Any similar issue reported or identified ???? please help

Hi,

We would take some time to do more research on this issue, and give you an update as soon as possible.

Before going forward, please try to exit the domain and re-join to check the resu

Hi,

The machines are not joined to the domain, it is affecting multiple sites, EAP-TLS only, if they are using EAp-PEAP it works fine so there is something with the client certificate from the windows system.

EAP is no longer recommend for 8.1:

http://social.technet.microsoft.com/Forums/windows/en-US/290c63b4-ce04-4483-a047-e1000c7d7699/wpa-security-types-are-missing-after-upgrading-to-windows-81?forum=w8itpronetworking#bff66720-0c1d-4efa-9261-7934399edc8f

In this topic there is a workaround (export the profile from a Win8.x PC and import it in 8.1). Maybe this works for you

Hi Andre,

that link you provided is talking about using WPA-TKIP for encryption which i'm not using, i'm using WPA2-AES which should be fine, and EAP is still supported only the lower encryption is removed.

hi,

please refer to the following link

Deploy Client Computer Certificates

http://technet.microsoft.com/en-us/library/cc731242.aspx

Client Certificate is installed correctly, again the device was working fine before upgrading it stopped connecting after the upgrade, we are using Aurba Clearpass for auto provisioning of the device and deploying of Client certificate.

Hi Kate,

Any update on this issue and the research ?? 

Thanks

Well download this radius test tools and see if your radius fails to
respond

http://www.novell.com/coolsolutions/tools/14377.html

There appears to be a bug with EAP-TLS.   Until Microsoft fixes it, try EAP-PEAP instead.   Apparently it works.

Are you sure about the bug thing ?? any official response from Microsoft ?

Thanks

I am sorry for that not all of the bug was published right now.

I had a similar problem with freeradius and PEAP or TTLS. After checking "network uses preauthentication" it worked. I didn't need to do this in Win7 or Win8 but in Win8.1.

Did you use SHA-1 or SHA-2 user certificate?