How do I configure "Computer Authentication" in Apple Configurator for 802.1X wifi?

Question

Level 1

31 points

How do I configure "Computer Authentication" in Apple Configurator for 802.1X wifi?

I'm trying to setup a mac on a network designed for PCs. Here's what I'm trying to approximate:

My 802.1X requires me first to be part of the Active Directory. I've done this. Details of the Windows security procedure are given in the screenshots below. What I can't figure out is how to setup "Computer Authentication".

Clicking on the security tab of my wireless properties... It says PEAP and WEP so presumably this is WEP enterprise in Apple configurator.

Click on settings and I see Authentication Method MSCHAPv2 which is only available under TTLS in Apple configurator. So is it PEAP or TTLS or both?

The problem with PEAP is that it always asks me for a user name and password but I want to use computer authentication. I tried using the "outer identity" which is the name I registered with the Active Directory, but no joy. Is the outer identity the correct place to designate a computer authentication type authentication mode?

Posted on Sep 5, 2012 6:45 AM

Reply

Answer 1

Sep 4, 2013 1:24 PM in response to NDchemE

Did you ever get this answered? I would like to know how to get my macbook pro to work in a all peecee environment.

Reply

Answer 2

Sep 4, 2013 1:26 PM in response to tommoore202

Apple has a number of white papers that explain this here:

http://training.apple.com/osx

Here's the one that specfically covers 802.1X and WPA2 Enterprise:

Download PDF

Reply

Answer 3

NDchemE Author

Level 1

31 points

Sep 4, 2013 1:30 PM in response to tommoore202

tommoore,

I got it to work after the 10.8.4 update, which improved compatibility with 802.1x enterprise environments. I lost connection a few days later.

Here are the best options I found (I also enabled login authentication):

Note that you have to be running OSX server and configuring your 802.1x setting through Profile Manager

Reply

Answer 4

Sep 5, 2013 5:32 AM in response to NDchemE

NDchemE

Thanks for the quick response. Does your name imply that you are a chemical engineer? I am an mechanical engineer and somtimes have to where the chemical hat.

I will have to find a utility to select the options you show. These options are not in the iphone configuration utility which was suggested elsewhere that I use. Not sure that I am ready to buy OSX server to create a profile.

Reply

Answer 5

NDchemE Author

Level 1

31 points

Sep 5, 2013 11:00 AM in response to tommoore202

Yes, I am a chemical engineer.

The Server utility is only $20, and that's all you need, but you will have to set-up a server machine in order to use the profile manager. I ran it on a MacBook Air for a while even. I ended up getting it, because I couldn't find any other way. Like you said, the iPhone configurator doesn't work, I tried.

Good luck, and let me know if you're successful

Reply

Answer 6

Sep 5, 2013 2:27 PM in response to NDchemE

I must be the dumbest man on earth. I downloaded the osx server and set it up to run on my macbook pro. I am using the profile manager and I can not get the Use Directory Autentication box to come up. I have tried all the other security types. The one shown is the one my company IT is using.

User uploaded file

Reply

Answer 7

NDchemE Author

Level 1

31 points

Sep 5, 2013 2:24 PM in response to tommoore202

You can imagine my frustration when I encountered the same problem. Fortunately, I know what you did wrong.

The Directory Authentication applies only to devices. If you're setting up a User profile it won't work. Go to your device and setup the profile there.

Reply