Database Users

Trying to connect to a secured network

I'm trying to connect my xda to a wpa tkip network at college.
When I'm trying to configure the network, I set EAP type to PEAP and click on properties but i get the error message "Cannot log on to the wireless network. This network requires a personal certificate to positively identify you".
I've asked the technicians here and they told me they havent been able to set up their ppc, and so couldn't help.
Any help would be appreciated.
P.s. this might be of relevance. the laptop setup guide tells me to set 'Select Authentication Method' to 'Secured password(EAP-MSCHAP v2)'

When you select PEAP, you should click the Properties button and set the Authentication Method to MS-CHAPv2. The default is Certificate, and you don't have one installed.

thanks for the reply wifihack.
the problem is that I can't access the properties option. As soon as I click the properties button i get the error "Cannot log on to the wireless..." and i cant get into the next window.
Any further ideas would really help.
iceze

ridan said:
thanks for the reply wifihack.
the problem is that I can't access the properties option. As soon as I click the properties button i get the error "Cannot log on to the wireless..." and i cant get into the next window.
Any further ideas would really help.
iceze
Click to expand...
Click to collapse
Did you ever find a solution? I am having the same problem.

I found the following reply :
http://mobilitytoday.com/forum/showthread.php?t=10412
It works fine for me even though I'm runing WM6 on Dopod P800W.
Credit to [email protected]
How to disable 'Validate Server Certificate' in WM5
-------------------------------------------------------------------
I strugled with this for days, and finally found the answer. I know this is old thread, but might help someone else. You have to "hack" it in with a reg editer, but is easy:
Enable WiFi PEAP Authentication with privately signed server certificates
WM5 happily allows PEAP Authentication over WiFi, but it doesn't provide the check box that XP does to (un)select "Authenticate the server certificate". If your PEAP authentication server isn't signed with a pricey "official" certificate, WM5 will refuse to connect with an error message about not recognizing the server's certificate.
To force WM5 to accept the PEAP server's certificate without attempting any other validation, add the following registry key:
[\HKLM\Comm\EAP\Extension\25\]
"ValidateServerCert"=dword:00000000

vvowovv said:
I found the following reply :
http://mobilitytoday.com/forum/showthread.php?t=10412
It works fine for me even though I'm runing WM6 on Dopod P800W.
Credit to [email protected]
How to disable 'Validate Server Certificate' in WM5
-------------------------------------------------------------------
I strugled with this for days, and finally found the answer. I know this is old thread, but might help someone else. You have to "hack" it in with a reg editer, but is easy:
Enable WiFi PEAP Authentication with privately signed server certificates
WM5 happily allows PEAP Authentication over WiFi, but it doesn't provide the check box that XP does to (un)select "Authenticate the server certificate". If your PEAP authentication server isn't signed with a pricey "official" certificate, WM5 will refuse to connect with an error message about not recognizing the server's certificate.
To force WM5 to accept the PEAP server's certificate without attempting any other validation, add the following registry key:
[\HKLM\Comm\EAP\Extension\25\]
"ValidateServerCert"=dword:00000000
Click to expand...
Click to collapse
I have tried this with WM 6.1 but I havent been able to test. not sure if I should use the quotation marks or not, but I will try both ways.

iceze said:
I'm trying to connect my xda to a wpa tkip network at college.
When I'm trying to configure the network, I set EAP type to PEAP and click on properties but i get the error message "Cannot log on to the wireless network. This network requires a personal certificate to positively identify you".
I've asked the technicians here and they told me they havent been able to set up their ppc, and so couldn't help.
Any help would be appreciated.
P.s. this might be of relevance. the laptop setup guide tells me to set 'Select Authentication Method' to 'Secured password(EAP-MSCHAP v2)'
Click to expand...
Click to collapse
I connect to a secure network too (WPA2/AES/PEAP) and the only way I could get it working was - my network administrator had to create a certificate file and email it to me (it is a file with extension .cer) which I saved on the PDA, located it through the File Explorer, clicked on it and the certificate got installed (I can see it if I go to Settings->System->Certificates) and then created the entry in Setting->Connections->Wifi->Add New.

vvowovv said:
I found the following reply :
http://mobilitytoday.com/forum/showthread.php?t=10412
It works fine for me even though I'm runing WM6 on Dopod P800W.
Credit to [email protected]
How to disable 'Validate Server Certificate' in WM5
-------------------------------------------------------------------
I strugled with this for days, and finally found the answer. I know this is old thread, but might help someone else. You have to "hack" it in with a reg editer, but is easy:
Enable WiFi PEAP Authentication with privately signed server certificates
WM5 happily allows PEAP Authentication over WiFi, but it doesn't provide the check box that XP does to (un)select "Authenticate the server certificate". If your PEAP authentication server isn't signed with a pricey "official" certificate, WM5 will refuse to connect with an error message about not recognizing the server's certificate.
To force WM5 to accept the PEAP server's certificate without attempting any other validation, add the following registry key:
[\HKLM\Comm\EAP\Extension\25\]
"ValidateServerCert"=dword:00000000
Click to expand...
Click to collapse
yeeeeeeees!!!
It works on wm6.1.
Thank you so so so much!!
Thanks a lot.

nicktgr15 said:
yeeeeeeees!!!
It works on wm6.1.
Thank you so so so much!!
Thanks a lot.
Click to expand...
Click to collapse
I tried this. It does not work for me on my HTC touch diamond WM6.1.
Is it add a new registry "key" or just a dword value under "25"???

Apple Airport WPA2 Personal, HTC Hermes wm6.1
Didn't work for me with Hermes and PDAVIET 6.1.
I have an Apple Airport and use WPA2 Personal. laptops connect without problem but not my hermes. It says "connecting" but eventually my (hidden) network is listed as "unavailable".

Does the registry edit work for windows mobile 6 on an at&t tilt? Thanks

Cannot log on to the wireless network. This network requires a personal certificate t
Tried the regedit option but still getting the same error message.

hey guys, did not know if anyone ever found a solution to this. exact same thing happens to me wheb trying to connect to my college network. my iphone never had a problem connecting to this network..
hmmm

Using Windows Mobile 6.5.3. Got my wifi working with these instructions:
modernnomads.info/wiki/index.php?page=Connecting+to+a+business+network
(Please prefix http part)
Since I am using Airtel DSL, I imported the "Airtel Secure WiFi Certificate Authority" certificate and rebooted the phone. Working fine since then.

Thanks for the info, guys !! Thumbs Up !!

Maybe you can connect to it on your laptop and get the certificate from there and then put it on your phone and install it on there

LEAP authentication

Hi,
I would just like to know whether anyone has successfully accessed their corporate LAN using LEAP authentication?
Mine just can't work, no matter what I tried. I am able to access normal hotspots and my home LAN with normal WEP secruity.

Nobody using LEAP at the moment?

I've not got LEAP running on any of my wireless networks, either home or work, however, you may struggle to get it working, given that LEAP is cisco-propriatary and as such, not very many wireless drivers support it. My old Axim x50v had a plugin that supported leap, but I've seen no evidence of this on the Ameo. There may be a commerical plugin available for WM5, but I'm not sure.?
Personally, if you have a choice, Id avoid LEAP following all the flaws found with it, but I guess sometimes we have to live with what we're given.

Yes, I am living with what I am given, because my company is using LEAP for its wireless network authentication.
I'm not sure whether it is the access router that is giving me problems, or WM5 implementation of LEAP was somehow broken. My Qtek 9000 on AKU 2.x was able to log into the network but not the U1000, which I believe has AKU 3.x
Does anyone know of any tool that I can use to help me debug the problem? Like some kind of a trace?

Thought I'd share this in case anyone has problem using LEAP to log into their corporate wireless LAN.
I couldn't accept that my Qtek 9000 can log onto my corporate's wireless but the U1000 can't. Until it struck me that I should do a comparision of the registry between these two. So I fired up my registry explorer and search for "leap" and sure enough there was a difference!
In the U1000, there is this additonal entry "HKLM\\Comm\TIACXWLN1\Parms\HTCPreloadLEAP" that was not present in the Qtek 9000. I noticed this key was set to value 0. Naturally I amended it to value 1, soft reset and tried to log-on. You can imagine my delight afterwards
So now my U1000 is almost the complete PDA solution I have been looking for, barring that PI2005 issue.
As a reminder, if you want to try this fix, do remember to back up your registry first.

Hi chrisoyh, I am sooooo grateful that you enlightened me on this one. Was trying to connect to my corporate LEAP network since I got my phone. Thank you! then I tested this "fix" and could not find anything new in the WiFi. In the original HTC ROM I had there was a LEAP setting that never worked. Now in the WM6 ROM I am using there is no LEAP tab. anyone?

OK - I managed to enable the LEAP tab. Now I'm wondering if you could help me with this. In HKLM\\Comm\EAP\Extension I have keys 13 (EAP-TLS - Smart Card or Certificate) 25 (PEAP) and 26 (EAP CHAP - MSV2 Challenge). I believe that there should be a LEAP key here. Can you possibly have a look and tell me if you have one what are the settings - please? Thanks very much.

Hi nealed,
Sorry but nope. There is no LEAP key under HKLM\Comm\EAP\Extension on my U1000 as well.
What are the settings you set for your WEP key under your wireless profile? Is it "Shared" or "Open"?

Hi chrisoyh,
WiFi Settings: Authentication: Open, Data encryption: WEP, The Key is provided automatically, Then I click Next and on Configure Network Authentication I tick Use IEEE 802.1x network access control - but do not have LEAP in EAP in the drop down box.
Wireless LAN settings : SSID: (the ssid I connect to) - User Name: my domain user name Password: my password Domain fqdn of the domain. authentication Type: Open System.
Just a question - should I be creating the connection in WiFi after setting up the Wireless LAN?
Do you have a LEAP dll anywhere on your machine? Other LEAP registry entries? I'm guessing there must be something missing!

Your Wireless LAN settings is similiar to mine.
As for the WiFi Settings: try using Shared instead of Open authentication. And select PEAP for the "Use IEEE 802.1x network access control".
Let's see whether this helps.

PEAP is Protected Extensible Authentication Protocol. I need to use LEAP (Lightweight) Extensible Authentication Protocol. Also, the authenticaltion is 802.1x open. The above won't work for me. I believe that there is a dll missing which will enable the selection of LEAP under EAP type drop down list. anyone?

Yes, I know the difference between LEAP and PEAP. But that is how it was exactly set up on my Dopod U1000 and old Qtek 9000, and both are able to access my corporate LAN.
There is no LEAP DLL file, trust me.
Also, the Open authentication is set in the LEAP tab under "Wireless LAN" setting. In WiFi tab, I find that using "Shared" authentication is the way to go for me to get connected.

This is not exactly related to the post but maybe you can help me. I am having stupid problems with wifi on th htc. If I use resco explorer to surf by wifi in my home network I see only works if the phone is not connected and previously I made a soft reset. Exactly what happens is I can see previous shared networks folders but If I look in the option "map network" I cannot find other computers.
The other consequence of this is I am having stupid problems with Jet printing because not ever the pda see the network.
Previously I had a jasjar and never troubles with this. I am not happy how is managed in the htc.

Dear All,
Need some help connecting my HTC Diamond to my work WiFI Network. Have tried the previous recommendations in this thread but still no joy.
I have the following:
HTC Touch Diamond P3700
Windows Mobile 6.1 Professional CE OS 5.2.20764 (Build 20764.1.4.3)
Configure Wireless Network:
Authentication: Open
Data Encryption: WEP
The key is automatically provided IS ticked
Use IEEE 802.1x network access control IS ticked
EAP type: PEAP
LEAP tab:
SSID: set to WiFI SSID
Domain: blank
User Name: Set
Password: Set
Authentication Type: Open System
I have tried Shared as previously recommended but no difference.
Please Help.
Thank you

wi-fi problem

I have a O2 XDA-EXEC Pocket PC to take advantage of our WiFi network at work. I am having problems setting up my WiFi connection and cannot seem to find out what to do to resolve.
When using my laptop wifi connect I set up the following
My network name (iiscwlan)
Authentication WPA
Data Encryption TKIP
802.1x EAP Type as PEAP.
Then under configuration of PEAP I uncheck Validate Server Certificate and all connects perfectly
TO KNOW MORE DETAILS ABOUT THIS CONNECTION VIST http://www.serc.iisc.ernet.in/LAPTOP_ WN_conf.htm
With the O2 XDA-EXEC I do the same but there is no configuration setting under PEAP to enable me to uncheck Validate Server Certificate. Every thing I do while attempting to connect using the O2 XDA-EXEC I get the following error messages:
Server Validation Error - The server certificate is issued by an unknown authority
and
Cannot log on to the wireless network. This network requires a personal certificate to positively identify you.
Does anyone have any idea how to disable validate server certificate under Windows Mobile 5.0???
plzz help me with this problem i do lot of my work with wi-fi ...........................

Upgrade ROM to WM6

is there an option to diable validate server certificate in WM6

Yes there is.

how can i upgrade to wm6

Jazzamataz said:
Yes there is.
Click to expand...
Click to collapse
Where is the option in WM6.0? I can't get to it

vickydada said:
how can i upgrade to wm6
Click to expand...
Click to collapse
You can search for some threads about this. But not here.

ranger47 said:
Where is the option in WM6.0? I can't get to it
Click to expand...
Click to collapse
I'd like to see where this is also? With PEAP (or EAP-TLS) you only get the option to select a Client Certificate. When it attempts to connect you do get a dialogue box to login with a Username, Password & Optional Domain, however I don't see anywhere to disable the verification of the Server Certificate?
Andy

ADB100 said:
I'd like to see where this is also? With PEAP (or EAP-TLS) you only get the option to select a Client Certificate. When it attempts to connect you do get a dialogue box to login with a Username, Password & Optional Domain, however I don't see anywhere to disable the verification of the Server Certificate?
Andy
Click to expand...
Click to collapse
Turns out you have to add a reg key:
\HKLM\Comm\EAP\Extension\25\ValidateServerCert=dword:00000000
Look in the wiki for who to add them if you dont know how.

how to connect to 802.1x wlan with Htc touch (windows mobile 6.1)

please help i can not connect
i select WPA -> AES
then PEAP
i need to click PEAP Properties and select Server Certificate and check GTE CyberTrust Global Root
but when i click Properties it says
"Can not log on to the wireless network. this requires a personal certificate to positively identify you"

i changed Wifi from Best battery to Best Performance hoping it will show me Properties, but doesnt show still
i read these posts, would these solve?
"i used 802.1x authentication on my MDA.
The only thing you have to do is to add a DWORD Regestry Entry under HKEY_LOCAL_MAICHNE-->Comm-->EAP-->Extension-->25
Name:"ValidateServerCert"
Value: 1 to activate Validation, 0 to turn it off
If you need a Regestry Editor you can use PHMRegedit."
another post
"i created the dword value you mention in this thread i still have the same problem.
Does anyones has the same problem with wm6?"
another post
"Now after days of reading i found a solution for all the devices that couldnt connect with the modified reg-key(HKLM/COMM/EAP/EXT....ValidateServerCert) to a wpa and eap-mschap secured wlan.
To enable the eap-options you have to install the securew2 client. Once you had installed you can choose for authentication method one of the securew2 has provided(this is where you see PEAP and 802.1X) in the WLAN Connections. Just select the TTLS method and disable the outer authentication and the certificate validation in the options. Now you can select EAP and MS-chapv2 in the authentication tab of the securew2 client. and at least you can sign in here your name,password and domain. You can also set an Profile with your settings in the Securew2 client.
This Solution has worked for me on a HTC Touch Cruise(XDA-Orbit-2)."

here are my registry settings
HKCU\Comm\EAPOL\Config\wu-dot1x\EapTypeId 25
HKCU\Comm\EAPOL\Config\wu-dot1x\Enable8021x 1
HKLM\Comm\EAP\Extension\25\
...EapTypeId 25
...Enable8021x 1
...ValidateServerCert 0
\HKLM\Comm\EAP\Extension\26\
...ValidateServerCert 0
also added
ValidateServerCert 0 and tried 1
but didnt solve

I've seen this problem and have done all the registry mods mentioned above.
Some days it works, some days it does not.
We're using WPA with TKIP and PEAP.
I don't know how to enable logging to see where things are going wrong.
The symptom I get is this:
1) Add the network to ID "Configure Wireless Networks" list
2) Setup the properties as above (WPA, TKIP, PEAP)
3) Choose Connect
--> At first I get Connecting then I get Unavailable
If anyone has a fix for this I'd love to hear it.
I'm currently not even getting the login screen.

Could you solve the "personal certificate" issue?
I'm having the same problem!
Thks

Personal certificate
I've not gotten around the personal certificate issue though I think it's a red-herring.
Rumor has it that MicroSoft will be pushing out a fix for ExchangeServer in December 2008. I've not searched around to verify this.
When the exchange server fix is out, I'll upgrade my ROM to Wm6.1 (SNN Diamond) - this has been great for connecting in the past and I expect it will work fine again.

i have the same problem
After a year, still no fix ??

i have this problem too.. can anybody help? :s

me too i have problems with 8.2.1x devices.
B U M P !! ! ! !

Windows Mobile 6.1 WLAN with Proxy

Hello!
I own a htc diamond and want to access a wifi network that's using a HTTP proxy. I can connect to the network itsself. However, the proxy settings aren't applied or sometimes deleted when I disactivate and reactivate wifi. When I try it at home, it can still access the internet even if I set the proxy server. (I don't have a proxy server at home, so it shouldn't work then...)
With a iPod Touch/iPhone the following settings work:
Server: server-01.hak-reutte.ac.at
Port: 8080
I also have to authenticate using an username and password, but I think there's also a web form so it's not necessary to configure that in the proxy configuration.
Thank you,
Simon

SimonKnight6600 said:
Hello!
I own a htc diamond and want to access a wifi network that's using a HTTP proxy. I can connect to the network itsself. However, the proxy settings aren't applied or sometimes deleted when I disactivate and reactivate wifi. When I try it at home, it can still access the internet even if I set the proxy server. (I don't have a proxy server at home, so it shouldn't work then...)
With a iPod Touch/iPhone the following settings work:
Server: server-01.hak-reutte.ac.at
Port: 8080
I also have to authenticate using an username and password, but I think there's also a web form so it's not necessary to configure that in the proxy configuration.
Thank you,
Simon
Click to expand...
Click to collapse
If you use ActiveSync or Windows Mobile Device Centre verify the connection settings are NOT set to automatic. If they are then the Proxy settings are overwritten each time you connect to your PC to sync. If you want to use a proxy over WiFi then you need to make sure your 'Work' connection settings specify the proxy and you need to configure the WiFi settings to 'Connects to Work' (or whatever it says, but NOT 'Internet').
Andy

Hi ADB100!
Thanks for your answer. The problem occurs even when I'm not connected to ActiveSync. Somehow the proxy server is reset when the WLAN is used. I tried the application WmWifiProfiles, but the problem is still there. When I set the proxy server and exit the settings application, the settings for HTTP proxy are somehow not saved. (When I reopen the settings dialog, the http proxy setting is blank, but the proxy for socks is still there.)
Regards,
Simon

SimonKnight6600 said:
Hi ADB100!
Thanks for your answer. The problem occurs even when I'm not connected to ActiveSync. Somehow the proxy server is reset when the WLAN is used. I tried the application WmWifiProfiles, but the problem is still there. When I set the proxy server and exit the settings application, the settings for HTTP proxy are somehow not saved. (When I reopen the settings dialog, the http proxy setting is blank, but the proxy for socks is still there.)
Regards,
Simon
Click to expand...
Click to collapse
Do you have proxy auto-discovery on?
Code:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
EnableAutoDetect=00000001
If its set to 1 then proxy auto-discovery is enabled, 0 is disabled.
I have no idea if it is this but worth a shot?
Andy

Hi ADB100!
AutoDetect wasn't acticated. (The key didn't exist.) I tried creating the key with value 0 and 1, but didn't help.
I think this must be a bug, because there are a lot of topics about this problem. Unfortuntatly, nobody seems to have a solution for this problem .
I tried changing the registry keys in HKLM/Comn/ConnMgr/Providers/. That worked, because the internet connection was dead then . I think it's possible to work around the problem by changing this keys. I will try that next week and when that really fixes the problem, I'll probably release an application for it.
However, do have some ideas left?
Thanks,
Simon

Bizarre....
I have never seen this on any of the Windows Mobile PDA's I have had.
I know if the connection settings: 'This computer is connected to:' are set to anything other than 'Automatic' then it resets any proxy you configure. I have mine set to 'Work Network' and the settings are never overwritten. I use a proxy at home and remember playing around with these settings as I had similar issues initially.
I know there is a known issue of the 'Hidden Proxy' if you let the device configure itself using the 'Connection Setup'. I have never let my device do this and have manually configured the HSDPA/GPRS settings.
Andy

Hi ADB100!
I've also aborted the connection setup, cause I didn't want my device to use HSDPA automatically.
I'm not 100% sure but I think my old device (HTC S730) had also some problems with the proxy, but I was able to solve them. Maybe it's also a problem with my ROM.
How stable/fast are the current RC builds of 6.5? Are they ready for every day use?
Thank you,
Simon

SimonKnight6600 said:
Hi ADB100!
I've also aborted the connection setup, cause I didn't want my device to use HSDPA automatically.
I'm not 100% sure but I think my old device (HTC S730) had also some problems with the proxy, but I was able to solve them. Maybe it's also a problem with my ROM.
How stable/fast are the current RC builds of 6.5? Are they ready for every day use?
Thank you,
Simon
Click to expand...
Click to collapse
I haven't tried any 6.5 ROMs for any period of time as they all seemed too buggy. I am on an almost stock 5.2.19212 ROM that I have lightly customised in a kitchen and I am happy with it.
Andy

This is really annoying... When you search the forums for "wifi proxy" you'll get more than 10 threads with the same problem, but without a solution.
You are using a wifi router with proxy at home and it works, right?
I'll upgrade to 6.5 now, maybe this fixes the problem...
Thanks,
Simon

SimonKnight6600 said:
This is really annoying... When you search the forums for "wifi proxy" you'll get more than 10 threads with the same problem, but without a solution.
You are using a wifi router with proxy at home and it works, right?
I'll upgrade to 6.5 now, maybe this fixes the problem...
Thanks,
Simon
Click to expand...
Click to collapse
Yes, I have MS ISA 2006 and it works.....

Truely amazing. I've upgraded to 6.5 and the problem is still there :-(. I've the radio from the latest official diamond rom. Could an other radio fix the problem?
//edit: Just to describe my problem further: When I set the proxy, exit the dialog and reopen the dialog, the proxy is there. When I open the internet explorer then, the http proxy gets deleted. However, the socks proxy is kept. This is kind of frustrating...
Thanks,
Simon

Read this one: http://www.htc.com/www/faqs.aspx?p_id=13&cat=0&id=36792 According to this article wifi + proxy should not work. What can I do now?
// Update: This looks extremly promising: http://forum.xda-developers.com/showthread.php?p=1990412#post1990412 I'll try that immediatly and post the results. If that works, I'll build an application to simplify applying the fix.
Thanks,
Simon

My status is too. Please help me!

It's a bug, that's sure. I finally got the proxy working, but after reconnecting the proxy settings were blank again .

Just to let you know I was also having problems with proxies and a google led me to this thread. For me, the advice in post 2 worked perfectly. I am using a 6.5 rom on a Touch HD.

Hi SivEd!
Did you also have the problem that your proxy settings get reset when you reconnect to the wifi network?

I've written an app that resolves this issue, let me know if you want to test.

Hi Anks!
Please upload your app, this is a real problem for me.
Thanks,
Simon

Simon, sent you a PM.

The problem seems to be fixed in recent Windows Mobile 6.5 builds, at least for me. I'm using build 21812. Unfortunatly, proxy authentification seems not to work in Opera. In Internet Explorer a dialog appears where I have to enter my username and password. Opera doesn't display such a dialog. But the main problem (proxy setting gets deleted) has been resolved.
HTH,
Simon