Windows device frequently disconnect from wifi with event id 12013

Question

Windows device frequently disconnect from wifi with event id 12013.Connecting to network after connecting the machine with hotspot and then swapping to device-wifi network(office_wifi).Device-wifi certificate available in desktop as per log but Cisco device showing NULL with Explicit Eap failure received. Able to see certificate in store on client device both computer cert and user cert available. Issue is intermittent and connectivity failure happens in office wifi network.Refer eventlog below

Log Name: Microsoft-Windows-WLAN-AutoConfig/Operational
Source: Microsoft-Windows-WLAN-AutoConfig
Date: 17/07/2023 16:55:31
Event ID: 12013
Task Category: (24014)
Level: Error
Keywords:
User: SYSTEM
Computer: DESKTOP
Description:
The description for Event ID 12013 from source Microsoft-Windows-WLAN-AutoConfig cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

Intel(R) Wi-Fi 6 AX201 160MHz
EV_RenderedValue_1.00
C0:30:00:00:00:58(laptop)
device-wifi
Infrastructure
70:6D:15:00:00:00(NW device-Cisco)
NULL
Explicit Eap failure received
327685
2151809044
798
A certificate could not be found that can be used with this Extensible Authentication Protocol.
2151809044
6
False

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="{9580d7dd-0379-4658-9870-d5be7d52d6de}" />
<EventID>12013</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>24014</Task>
<Opcode>205</Opcode>
<Keywords>0x8000000000000600</Keywords>
<TimeCreated SystemTime="2023-07-17T15:55:31.223577800Z" />
<EventRecordID>19440</EventRecordID>
<Correlation />
<Execution ProcessID="4128" ThreadID="4544" />
<Channel>Microsoft-Windows-WLAN-AutoConfig/Operational</Channel>
<Computer>DESKTOP-</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Adapter">Intel(R) Wi-Fi 6 AX201 160MHz</Data>
<Data Name="DeviceGuid">{e1c50514-1a29-405e-ae5f-b76f3a67e6a2}</Data>
<Data Name="LocalMac">C0:30:00:00:00:58</Data>
<Data Name="SSID">device-wifi</Data>
<Data Name="BSSType">Infrastructure</Data>
<Data Name="PeerMac">70:6D:15:00:00:00</Data>
<Data Name="Identity">NULL</Data>
<Data Name="User">
</Data>
<Data Name="Domain">
</Data>
<Data Name="ReasonText">Explicit Eap failure received</Data>
<Data Name="ReasonCode">0x50005</Data>
<Data Name="ErrorCode">0x80420014</Data>
<Data Name="EAPReasonCode">0x31e</Data>
<Data Name="EAPRootCauseString">A certificate could not be found that can be used with this Extensible Authentication Protocol.</Data>
<Data Name="EAPErrorCode">0x80420014</Data>
<Data Name="ConnectionId">0x6</Data>
<Data Name="ExplicitCredentials">false</Data>
</EventData>
</Event>

Answer 1

With the root cause of this issue being:

<Data Name="EAPRootCauseString">A certificate could not be found that can be used with this Extensible Authentication Protocol>

My first place is to make sure that the user/device certificate (whichever one you are using) is installed on the machine.

It needs to be in the "Personal" store.

Remove all other certificates here if they are not required.

Ensure the correct internal Root CA certificate is also installed and deployed to the device.

Do you use templates to auto-enroll device/user certificates via an internal CA?

If so, make sure you are only deploying or have certificates for "Auto-Enroll" for the authentication type you need, Device or User.

The Internal RADIUS server will need a specific setting enabled to accept Device authentication, and would fail if the device certificate was offered out upon authentication.

Hope this helps, and gives you a starting point at least!