{"id":5573,"date":"2022-02-22T06:29:46","date_gmt":"2022-02-22T06:29:46","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=5573"},"modified":"2022-02-22T06:29:46","modified_gmt":"2022-02-22T06:29:46","slug":"the-client-could-not-be-authenticated-because-the-extensible-authentication-protocol-eap-type-cannot-be-processed-by-the-server-nps-radius-aruba","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/random\/the-client-could-not-be-authenticated-because-the-extensible-authentication-protocol-eap-type-cannot-be-processed-by-the-server-nps-radius-aruba","title":{"rendered":"The client could not be authenticated because the Extensible Authentication Protocol (EAP) Type cannot be processed by the server – NPS Radius Aruba"},"content":{"rendered":"

Recently a customers Aruba Wireless System was denying its wireless clients access.<\/p>

A look at the logs showed Authentication failure. The Authentication was set to Radius.<\/p>

A look on the radius server showed the failure reason ( 6275 ) as<\/p>

The client could not be authenticated because the Extensible Authentication Protocol (EAP) Type cannot be processed by the server tls 1.0<\/p>

Usually this is due to Cert expiry , however this was fine :\u00a0<\/p>

\"\"<\/p>

Looking in the System Log and I found :\u00a0<\/p>

A fatal error occurred while creating an SSL server credential. The internal error state is 10013.<\/p>

This is because TLS1.0 has been disabled ( HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\\Protocols\\TLS 1.0\\Server\\Enabled = 0 ) on a Server 2012 Server<\/p>

The fix is to create Dword “TlsVersion” in the below with Value c00 for TLS 1.2<\/p>

HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\RasMan\\PPP\\EAP\\13<\/p>

HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\RasMan\\PPP\\EAP\\25<\/p>

\"\"<\/p>

Restart Extensible Authentication Protocol<\/strong> service when done<\/p>","protected":false},"excerpt":{"rendered":"

Recently a customers Aruba Wireless System was denying its wireless clients access.A look at the logs showed Authentication failure. The Authentication was set to Radius.A look on […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[3499,3500,3713,3744,2676,3745,2350],"class_list":["post-5573","post","type-post","status-publish","format-standard","hentry","category-random","tag-1-0","tag-1-1","tag-1-2","tag-a-fatal-error-occurred-while-creating-an-ssl-server-credential-the-internal-error-state-is-10013","tag-aruba","tag-the-client-could-not-be-authenticated-because-the-extensible-authentication-protocol-eap-type-cannot-be-processed-by-the-server-tls-1-0","tag-tls"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t