[hadimassa]

It's advised to format the device after a firmware update. Reset the N97. Dial *#7370# 12345 reformat, you'll lose all data. Make a backup first and restore without the settings.

[datacrusher]

Iv tryed many suggestions as the above, but still cant connect on my wpa2 enterprise eap-peap mschapv2 wifi network.

on windows machines i can just ignore the certificate, but on the telefone if i set it to none, or some of (iv tryed 6) the almost 20 certificates installed on my e63 phone still wont work .

iv went to the TI department, witch told me that every other notebook was able to connect with no issues, so the problem must be on my phone. ... the discussion about choosing to use a certificate went down when i knew that they need to buy one to set on the network, since its already working i bet that it wont be done.

any clues? any hacks that allows me to connect to my network without certificates? kinda **bleep** if i dont, mostly bought this phone so i could use the wifi on the university... very prohibitive situation, dont wanna change the phone just because of this issue...

i like nokia phones, and as iv seen on the forums its not a phone issue, its a symbian / nokia choice... Too expensive an android phone right now, Im very hopeful that i can connect with my e63.

thanks in advance

[vickysekar]

the hard reset worked...thanks for your help

[sumana]

Hi,

I have a Nokia x6-00 16GB phone & I need to connect to my Office Wi-fi. 

I have tried adding the access point through : Settings > Connectivity > Destinations > Access point.

Data bearer : Wireless LAN

WLAN Network Name : *****

WLAN Security Mode : 802.1X

     WLAN Security Settings:

WPA/WPA2 : EAP

   EAP Plug-in settings:

EAP-PEAP : Enabled

The rest of the list : Disabled

   EAP-PEAP Settings:

Personal Certificate : Not defined

Authority Certificate: Not defined

My office has not given any CA certificate for the EAP settings, and I am requesting them for the same, as Saataja mentions in the earlier posts.

However, I am facing a strange problem on my X6 device. In the EAP-PEAP settings, after selecting "User name in use" as "User defined", when I try to edit the "User name" field, everything gets closed automatically, I am directed to the Settings page on my phone. 

I am simply unable to edit the User name field at all!

The software version on my phone is V 20.0.005

Has anyone else faced this problem ?

Any help would be greatly appreciated!

Thanks!

Sumana

[sumana]

Ah, got the problem - I was using the SlideIT keyboard to enter the username. For some strange reason, this doesnt seem to work! I disabled the SlideIT keyboard & then was able to enter my username.

Btw, I dont see a "password" field at all... Where would this be ??

Thanks,

Sumana

[novice79]

Hi

I have a nokia X6-1 GB and I have similar problem. I am trying to connect to WLAN but I get the error message "Unable to connect. Invalid WPA Pre-shared key" even though I use the same key to connent to my WLAN network.

The network is "WPA-Personal" Encryption type is "TKIP". I see people been able to resolve the problems here, which is good news. Hope to find solution to my problem

[hadimassa]

Turn off WPA2 only mode.

[novice79]

Hi

I tried with the WPA mode off but it is still not working. Any help here

[ptr74]

Thanks a lot!!! You are helping a lot of people!!! And with this guide, you gave me peace

[JsE72]

hi, i cannot seem to find mschap-v2? i need to log in to uottawa's wifi but its PEAP?

i would need to enter my username and password somebody please help!! our connection is also WPA. This is there guide for BB but they dont have one for nokia. 

http://www.ccs.uottawa.ca/connect/wireless/config-wpa-bb.html

[hadimassa]

On what phone?

[saataja]

---

JsE72 wrote:

hi, i cannot seem to find mschap-v2? i need to log in to uottawa's wifi but its PEAP?

i would need to enter my username and password somebody please help!! our connection is also WPA. This is there guide for BB but they dont have one for nokia. 

http://www.ccs.uottawa.ca/connect/wireless/config-wpa-bb.html

---

Assuming that you have a E72 like your username suggests, try following:

Control panel -> Settings -> Destinations -> Internet

Check if your phone already has an internet access point (IAP i.e. connection settings profile) for a "uOttawa_WPA" WLAN network. If IAP for this network already exist then select it to edit it further.   

If your phone has multiple (duplicate) IAP entries for this network ( named "uOttawa_WPA(1) etc.) you should delete all duplicates and have only one instance of "uOttawa_WPA" access point within the "Internet" destination.

If "uOttawa_WPA" IAP doesn't already exist you need to create new IAP for it. Stay in the "Internet" destination view and select Options -> New access point -> Yes -> phone will scan all available WLAN networks and then you can select "uOttawa_WPA" from the list of available WLAN networks (assuming that you do this while you are within the coverage area of the uOttawa_WPA network).

New IAP for "uOttawa_WPA" network will be created automatically but default EAP settings inside the access point are still not suitable for PEAP authentication, so you need to edit those manually.

To configure settings for "uOttawa_WPA" (according to what was mentioned on the instructions for BB you provided):

Select the "uOttawa_WPA" IAP within the "Internet" destination to Edit it.

Ensure that:

WLAN network name: uOttawa_WPA
WLAN network mode: Infrastructure
WLAN security mode: WPA/WPA2

Then go deeper in to settings menu by selecting "WLAN Security settings" and ensure that "WPA/WPA2" option is set to "EAP"  (instead of Pre-shared key).

Go to "EAP plug-in settings" menu. First enable "EAP-PEAP" and then disable EAP-SIM and EAP-AKA methods. (enable/disable can be done via "Options" menu while highlighting the particular EAP method).

Highlight the EAP-PEAP again and select it (or Options -> Edit) to enter EAP-PEAP specific settings.

On EAP-PEAP settings, define:

Personal certificate:  Not defined
Authority certificate:  "Thawte Premium Server CA"

Note!! Carefully select the correct "authority certificate" from list of pre-installed CA certificates since there is no way for PEAP authentication to succeed if incorrect Authority Certificate (for this particular network deployment)has been selected or it has been left as "Not defined".

User name in use:  User defined
User name: your username (e.g. E123456)
Realm in use:  User defined
Realm:  <leave this empty>

TLS Privacy: Off

Allow PEAPv0: Yes
Allow PEAPv1: No   (might work also if PEAPv1 is allowed. PEAPv0 must be allowed in any case)
Allow PEAPv2: No

Then go to the next tab on the PEAP settings (named "EAPs") by hitting right on the directional pad (or touching the arrows in case of touch phone). It is quite easy to miss that PEAP settings view has multiple tabs since the small left/right arrow on top of the screen is the only indication that there are more tabs with additional settings.

On "EAP's" tab you will need select the actual inner authentication method for EAP-PEAP tunnel.  Enable "EAP-MSCHAPv2" and remember to disable EAP-SIM and EAP-AKA.  

Then edit the EAP-MSHAPv2 settings:

User name:  your username (e.g. E123456)
Prompt password: No
Password:  your password

Take care that username and password are entered correctly, including capitalization of letters.

Third "tab" on the PEAP settings is "Ciphers" but you don't typically have to modify those, i.e. the ciphers that are enabled by default are typically sufficient.

Finally go "Back" multiple times in order to save the settings you made above.

Rest of the instructions below are more generic (not specific to this PEAP configuration issue), referring to prioritization of the connection methods (access points) and how/which access point will become active when application is looking for connection to internet.

First, ensure that the "uOttawa_WPA" access point  you just created is correctly prioritized within the "Internet" Destination, it should have higher priority than the cellular packet data connection (3G/GPRS).

You can change access point priorities within a destination by highlighting the access point and selecting   Options -> Organize -> Change priority ->  move "selection" up or down on the list of IAPs and select "OK" to move previsously selected IAP to this priority.

Another thing to check is the "Default connection" setting.  Control Panel -> Settings -> Connection -> Destinations -> Options -> Default connection. Set default connection to Internet (i.e. the destination where your WLAN and packet data access points are defined in priority order) or set it to "Always Ask" if you prefer to be prompted before connection is established.

Some applications might in addition have their own built-in connectivity (access point) settings. E.g. define access point setting for Web browser: 

Start the Web browser application and go to Options -> General -> Access Point -> set this to "Internet" (destination where your different WLAN and packet data connections are in priority order) or select "Always ask" if you wish to be prompted (every time) before browser connects to internet.

[jonnyjl]

Nokia, this is pretty pathetic that its not automatic yet. Especially considering there's enterprise oriented phones (E-Series). I remember having this issue with my N97. I wonder if there's any hope for this to be resolved with the current Symbian Roadmap.

[anantha1988]

you are talking about the CA server. I dont think that it'll work here in India. Which is the authority certificate to be used here? any ideas? I'm getting **bleep** off with the WiFi thing in my cell.

[alak]

hi i go to rmit uni in australia and i cant connect to the wpa2 wireless aswell as eduroam, both the servers use ttls pap and i think they use thawte premium server ca cert i have contacted it and didnt get support. they have instructions for android phones on the website and it didnt mention to use any certs
if someone can help that would be great. i have played around with every setting possible.......

[i_rajdeep]

Hi,

I work for a private company, and we have a WPA-Enterprised network. Company provide following settings for Blackberry users.

Name : IxWLANP

SSID: IxWLANP

Band Type: 802.11 b/g

User Name :

Password:

CA Certificate: None Selected

Interlink Security : EAP-MS-CHAPV2

Token: None

Select Disable Server Certificate.

What I have configured for my Nokia E72 is as follows:

Connection Name: IxWLANP

Data Bearer: Wireless LAN

WLAN Network Name :IxWLANP

Network Status: Public

WLAN Network Mode: Infrastructure

WLAN Security Mode : WPA/WPA2

Under WLAN Security Settings

WPA/WPA2: EAP

Under Plug-in settings:

EAP-PEAP only selected

Under EAP-PEAP edit mode:

Personal Certificate: Not defined

Authority Certificate: Not Defined

User Name In US: User Defined

User Name: ******* (My User Name)

Realm In Use: User Defined

Realm: Blank

TLS Privacy: OFF

Allow PEAPv0 : yes

Allow PEAPv1 :No

Allow PEAPv2 : No

Under EAPs: EAP-MSCHAPv2 Selected

User Name: (My USer name)

Prompt password: No

Password : (My Password.)

No change in ciphering

WPA2 only modeff

This is all I have done.

Network is showing as known network. But If I am trying to connect to any web page its saying EAP-PEAP authentication Failed.

Please help.

[unsparkable]

Hi,

I've configured my phone with both following configurations (at the end of the message)

However, it'll either returned EAP-TTLS <or> EAP-PEAP Authentication failure. And soemtimes, it'll return Network not found @_@ (I notice one strange thing, when I try to connect to the particular known network, the progress bar showing 'connecting via...' appears and the network list shown at the background is blank besides <Other (hidden netw.)>)

I called up IT and asked, they said they don't use any certificate. My Android/iPhone/Bleckberry friends are connected flawlessly (without any further config, or CA installation besides NT login). Please advise...

---

saataja wrote:

---

fisol1 wrote:

SSID: agiwlan

Network Authentication:  WPA2- Enterprise

Data Encryption: TKIP

Authentication Type: TTLS

Authentication Protocol MS-CHAPv2

(use your A Window ID and password)

This is my workplace WIFI but i have problem connecting.. I cant seem to find TKIP data encryption.. Please help.

Thansk.

Fisol

---

When you select the WPA/WPA2 EAP security mode on the phone it should automatically support both TKIP and AES encryption algorithms. You should however make sure that "WPA2 only mode" has not been mistakenly enabled because in order to allow WPA/WPA2 connections using TKIP encryption "WPA2 only mode" setting must be set "OFF".

Also note that in order to successfully authenticate using EAP-TTLS/MS-CHAPv2 you must have a valid "Authority Certificate" installed on the phone and defined in your Internet Access Point setting (specifically in EAP-TTLS plugin settings). Ask your network admininistrator which CA certificate you need to use on the phone for EAP-TTLS authentication.

---

my settings:

·         WLAN security mode: WPA/WPA2

·         WLAN security settings:

·         WPA/WPA2: EAP

·         EAP-PEAP settings:

o   Personal Certificate: Not defined

o   Authority Certificate: Not defined (This is where I read online, that PEAP needs a certificate to be connected; though I set it to Not defined, connecting to spark showing me EAP-PEAP authentication failure)

o   User anme in use: User defined

o   User name: aaa(this is my nt login)

o   Realm in use: User defined

o   Realm: <blank> (since we are using domain, not aaa@a)

o   TLS privacy: off

o   Allow PEAPv0: Yes

o   Allow PEAPv1: Yes

o   Allow PEAPv2: No

o   EAP-MSCHAPv2:

§  User name: a\aaa

§  Prompt password: no

§  Passowrd: <NT Login Password>

o   Cipher: RSA, AES, SHA

Besides the above-mentioned, I did try to use TTLS too:

·         WLAN security mode: WPA/WPA2

·         WLAN security settings:

·         WPA/WPA2: EAP

·         EAP-TTLS Settings:

o   Personal Certificate: Not defined

o   Authority Certificate: Not defined (same as above)

o   User anme in use: User defined

o   User name: aaa

o   Realm in use: User defined

o   Realm: <blank> (since we are using domain, not aaa@a)

o   TLS Privacy

o   EAP-MSCHAPv2:

§  User name: a\aaa

§  Prompt password: no

§  Passowrd: <NT Login Password>

[ramany]

Hello everyone,

I just purchased the Nokia N8 and am very excited. I personally think its the best smartphone in the market at this time (until the N9 arrives).

Having said this and flaunting the phone around the office now suddenly i am the object of joke.

The EAP-PEAP authentication wihout server certificate is the issue.

Now I know after scanning thorugh all the related posts here and this thread that Nokia does not support this kind of authentication.

My colleagues iPhone and another ones Andriod and my Dell Streak 7 easily gets connected onto this network without even needing any special configuration.

These devices just identify the kind of authentication supported and offer a login screen and i can just put the loging id and password and i am in business, but that is in the Dell Streak 7.

On the N8 however I have no way to ignore the certificate.

Is the symbian development team working on supporting this kind of authentication. I mean this is really shameful, i am the only proponent of Nokia around here and now i am getting really beaten up because of this serious limitation.

The Nokia Phone seems to provide millions of possible combinations for EAP-PEAP suthentication however it does not provide the basic stuff, this is really shameful.

Has someone already found a solution?

I actually tried copying my company's certificate from my PC to the phone and selected that certificate, but without any luck as the Access point does not offer any certificate at all. There has to be a wya around it.

Has someone writeen a App that would work around this issue?

My office has two Access points. One secured with EAP-PEAP and the other is open but once you connect to that it downloads a vertificate and open a web browser and asks for userid and password. But that access point is for guests and temporary userid and password is provided to them i cant go there. I checked that particualr certificate and it turned out to be from equifax (Equifax Secure Certificate) from securelogin.arubanetworks.com. The Access point happens to be manufactured by Aruba Networks.

Anyway i figured maybe the EAP-PEAP secured access point is using this certificate and tried using it without success. My administrator speciafially said that you should not use any certificate on that access point.

So in the last 3-4 days i have exhausted all ways to connect to my office network and the shame is increasing every day.

I am now begging for a solution to this.

[mizelle24]

Hello, did u find a solution to this problem?? I also have an N8 and i'm having a hard time connecting to my school's wireless network

[szerenatf]

Having the same problems on Nokia C6-00. The company I work for didn't provide any guide on how to connect to the Wifi. I didn't even know it existed until one of my co-workers checked his e-mails on his iPhone. After struggling for a while with settings and finding out if it is possible at all to connect to WPA2-Enterprise networks with a Nokia C6-00 I got stuck.

I read all the previous posts and set up a PEAP/MS-CHAPv2 IAP accordingly.

I contacted the IT guys to send me a link to the certificate I need but they state that they don't have a certificate system set up. However, my colleague deleted all company wifi based settings and set it up again for me to watch the process on an iPhone and it all started with a certificate automatically being downloaded on his iPhone then he had to provide his credentials and that was it.

I asked him if he can somehow get this certificate on the computer or on my phone directly but he sais that he cannot access it. I don't want him to install any 3rd party software on his iPhone just to see all the files on the phone as it may mess up the working of the whole phone. Furthermore, I don't even know if it would get my Nokia to connect without ending up with a PEAP authentication failed message.

When using Windows to connect to the wifi, does this certificate get downloaded somewhere in the Control Panel > Internet Settings > Content > Certificates (XP) list? If yes, I could easily export it in the right format and send it to my phone either by using package data and e-mail or throuh a USB connection.

However, if not it just means that I bought a "smartphone" that's not even able to connect to a company network - which anyway is a breeze for iPhones. I guess it would also easily work on Android phones which really fall into the same price category as most of Nokia phones.

I don't mind fiddling around with settings if I know it's just a matter of time and effort to get it going but if it is impossible why on earth don't you release an update that would solve the issue of connecting to a server without validating its identity before?

I'm afraid I'll never buy a Nokia phone again.