Explore Our Microsoft Intune Training →
=============================================================
If you are an IT admin deploying enterprise Wi-Fi via Intune, you may have encountered issues where users are prompted for credentials despite credential caching. In this blog post, we’ll walk you through the reasons behind these prompts, the differences between user and device certificate authentication, SCEP and PKCS profile dependencies for cert-based Wi-Fi, validating root and intermediate certificate trust chain, and troubleshooting via Event Viewer WLAN-AutoConfig logs.
Why Users Get Prompted for Credentials Despite Credential Caching
———————————————————————
Users may be prompted for credentials despite credential caching due to various reasons such as network changes, certificate expiration, or misconfigured Wi-Fi profiles. To address this issue, it’s crucial to verify the Wi-Fi profile is assigned to the device, not just the user.
Differences Between User and Device Certificate Authentication
——————————————————————
In user certificate authentication, each user has a unique digital certificate that is used for network authentication. In contrast, in device certificate authentication, a single certificate is installed on the device, and it is used to authenticate all users connected to the device.
SCEP and PKCS Profile Dependencies for Cert-Based Wi-Fi
———————————————————-
For certificate-based authentication, you’ll need to deploy SCEP or PKCS certificate profiles assigned to the same group, and reference it in the Wi-Fi profile EAP settings.
Validating Root and Intermediate Certificate Trust Chain
————————————————————
Ensure that the root and intermediate certificates in the Wi-Fi profile are trusted by the device. This can be done by validating the certificate trust chain in the certificate’s properties.
Troubleshooting via Event Viewer WLAN-AutoConfig Logs
———————————————————
Check Event Viewer > Applications and Services Logs > Microsoft > Windows > WLAN-AutoConfig > Operational for specific EAP failure reasons. This log can provide valuable insights into the cause of the credential prompt issues.
Conclusion
————–
By following the steps outlined in this blog post, you should be able to resolve Wi-Fi profile 802.1X credential prompt issues in Microsoft Intune. If you’re still having trouble or want to learn more about managing Wi-Fi profiles and network security in Microsoft Intune, consider enrolling in one of ITP Training’s courses on Microsoft Intune and Microsoft Cloud Security.
Explore Our Microsoft Intune Training →
Written by Mohammed Akhter
Founder of ITP Training. 50,000+ students trained across 30+ countries in Microsoft endpoint and cloud security. Learn more →