{"id":5573,"date":"2022-02-22T06:29:46","date_gmt":"2022-02-22T06:29:46","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=5573"},"modified":"2022-02-22T06:29:46","modified_gmt":"2022-02-22T06:29:46","slug":"the-client-could-not-be-authenticated-because-the-extensible-authentication-protocol-eap-type-cannot-be-processed-by-the-server-nps-radius-aruba","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/random\/the-client-could-not-be-authenticated-because-the-extensible-authentication-protocol-eap-type-cannot-be-processed-by-the-server-nps-radius-aruba","title":{"rendered":"The client could not be authenticated  because the Extensible Authentication Protocol (EAP) Type cannot be processed by the server &#8211; NPS Radius Aruba"},"content":{"rendered":"<p>Recently a customers Aruba Wireless System was denying its wireless clients access.<\/p><p>A look at the logs showed Authentication failure. The Authentication was set to Radius.<\/p><p>A look on the radius server showed the failure reason ( 6275 ) as<\/p><p>The client could not be authenticated because the Extensible Authentication Protocol (EAP) Type cannot be processed by the server tls 1.0<\/p><p>Usually this is due to Cert expiry , however this was fine :\u00a0<\/p><p id=\"VfVyyNS\"><img loading=\"lazy\" decoding=\"async\" width=\"997\" height=\"608\" class=\"alignnone size-full wp-image-5574  img-responsive\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2022\/02\/img_6214822529ae9.png\" alt=\"\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2022\/02\/img_6214822529ae9.png 997w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2022\/02\/img_6214822529ae9-300x183.png 300w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2022\/02\/img_6214822529ae9-768x468.png 768w\" sizes=\"auto, (max-width: 997px) 100vw, 997px\" \/><\/p><p>Looking in the System Log and I found :\u00a0<\/p><p>A fatal error occurred while creating an SSL server credential. The internal error state is 10013.<\/p><p>This is because TLS1.0 has been disabled ( HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL\\Protocols\\TLS 1.0\\Server\\Enabled = 0 ) on a Server 2012 Server<\/p><p>The fix is to create Dword &#8220;TlsVersion&#8221; in the below with Value c00 for TLS 1.2<\/p><p>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\RasMan\\PPP\\EAP\\13<\/p><p>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\RasMan\\PPP\\EAP\\25<\/p><p id=\"aaflACa\"><img loading=\"lazy\" decoding=\"async\" width=\"830\" height=\"166\" class=\"alignnone size-full wp-image-5575  img-responsive\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2022\/02\/img_6214828c34af3.png\" alt=\"\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2022\/02\/img_6214828c34af3.png 830w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2022\/02\/img_6214828c34af3-300x60.png 300w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2022\/02\/img_6214828c34af3-768x154.png 768w\" sizes=\"auto, (max-width: 830px) 100vw, 830px\" \/><\/p><p>Restart <strong>Extensible Authentication Protocol<\/strong> service when done<\/p>","protected":false},"excerpt":{"rendered":"<p>Recently a customers Aruba Wireless System was denying its wireless clients access.A look at the logs showed Authentication failure. The Authentication was set to Radius.A look on [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[3499,3500,3713,3744,2676,3745,2350],"class_list":["post-5573","post","type-post","status-publish","format-standard","hentry","category-random","tag-1-0","tag-1-1","tag-1-2","tag-a-fatal-error-occurred-while-creating-an-ssl-server-credential-the-internal-error-state-is-10013","tag-aruba","tag-the-client-could-not-be-authenticated-because-the-extensible-authentication-protocol-eap-type-cannot-be-processed-by-the-server-tls-1-0","tag-tls"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/5573","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/comments?post=5573"}],"version-history":[{"count":1,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/5573\/revisions"}],"predecessor-version":[{"id":5576,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/5573\/revisions\/5576"}],"wp:attachment":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/media?parent=5573"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/categories?post=5573"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/tags?post=5573"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}