Wifi connectivity fails on Android with PKCS based authentication

Sarika 1

Hi Team,

We have configured PKCS profile ,Wifi profile, Root CA and Sub CA to both IOS and android devices
Its been observed that IOS devices gets connected to wifi properly
But android fails to connect to wifi with TLS/SSL handshake failed

1.For IOS ,we used service account inside subject name format(NO SAN configured)
2.For android ,We had to configure SAN= service account UPN as profile installation fails without SAN configured

1 answer

Crystal-MSFT 43,316 Reputation points Microsoft Vendor

2022-06-22T02:17:37.503+00:00

@Sarika , From your description, it seems we deploy WiFi profile via Intune which needs certificate authentication. For iOS device, it is working, But for Android device, it is failed.during TLS/SSL handshake. If there's any misunderstanding, feel free to let us know.

For the TLS/SSL handshake failure issue, to clarify the issue, we can manually connect the WiFi using the certificate we get from Intune to see if the issue is on certificate side or on WiFI profile side.

Meanwhile, here is a link about troubleshooting WiFi profile for the reference:
https://learn.microsoft.com/en-us/troubleshoot/mem/intune/troubleshoot-wi-fi-profiles

Hope it can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
Sarika 1 Reputation point

2022-06-22T07:22:05.82+00:00

Hi Crystal ,Thanks for reply

On ios ,PKCS is configured with only subject name format (nothing configured within SAN) and it worked

On android ,when we do that same .wifi profile is failing to install
On OMADM logs ,its observed that SAN should be configured
3So we had to configure SAN name within android PKCS profile

Through which all the profiles gets installed but never connects to wifi

Crystal-MSFT 43,316 Reputation points Microsoft Vendor

2022-06-23T02:27:03.21+00:00

@@Sarika , For our issue, as a test, we can manually request a certificate from the same certificate template which only with subject included. Import it on android device and see if the WiFi can work. Here is a link I find to request certificate manually, maybe you can read it as a reference:
https://networklessons.com/uncategorized/eap-tls-certificates-for-wireless-on-android
Note: Non-Microsoft link, just for the reference.

Meanwhile, you can contact your WiFi support to see if more detailed logs can be f found to identity why it is failed.

Sarika 1 Reputation point

2022-06-23T07:29:04.177+00:00

Hi Crystal,
Ill try that but will Subject name format and SAN would cause this issue?
https://support.google.com/work/android/thread/133933800/eap-tls-wifi-no-longer-works-in-android-11-12?hl=en

I found above article which says known issue

Crystal-MSFT 43,316 Reputation points Microsoft Vendor

2022-06-23T08:17:53.667+00:00

@Sarika , In fact, I didn't meet any issue with SAN before. So not sure. From the Android enterprise link you provided, it seems EAP-TLS protected wifi no longer works in Android 11/12. If our device is also with the two versions. I think you need to contact the Wifi and Android support to double confirm on this.
Sign in to comment