iPad 8th Gen eap-tls wireless association issue


Hi

I've two iPads, 6th Gen and 8th Gen
IOS 14.4.2 on both
MDM is in use and Wifi settings are delivered remotely.
machine cert is from customer CA and Trusted server cert from Radius - self-signed Service cert

Same configuration with equals setting are delivered to iPADs ( CA certs are sure / iPAD not same)

Issue
6th Gen iPad associates and authenticated (eap-tls) w/o problems
  • Private Address is ON

8th Gen does even not associate to Wifi.
  • Private Address selection not available is this is issue?

Attached is part of log collected from iPAd 8th Gen

Anyone have had this issue and if solved pls let me know
Br
Juha-Pekka






04/26/2021 15:37:10.332 -[WFBlacklistEngine setTriggerForNetworkWithReasonAndState:reason:reasonData:bssid:state:]: Trigger 'EAPAssocFailure' for 'TestX[ea:55:2d:f3:74:73]' (reason=7 reasonData=-369033213 state=4)

EAP association is failing repeatedly until the device gives up on the network. reasonData=-369033213 indicates that user interaction is required. That implies to me that the device thinks it needs to prompt the user for username and password, which it can't because the network was configured via profile rather than interactively. Perhaps the network is rejecting the client cert, or not even negotiating cert-based auth for the device.
iPad 8th Gen eap-tls wireless association issue
 
 
Q