{"id":87871,"date":"2023-06-05T13:09:49","date_gmt":"2023-06-05T17:09:49","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&p=87871"},"modified":"2024-02-08T14:03:47","modified_gmt":"2024-02-08T19:03:47","slug":"radius-authentication-fails-with-certificate-error","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/radius-authentication-fails-with-certificate-error","title":{"rendered":"RADIUS Authentication Fails with Certificate Error"},"content":{"rendered":"\n

This article outlines scenarios where RADIUS authentication fails on a Windows device due to certificate errors.<\/p>\n\n\n\n

Symtoms<\/h2>\n\n\n\n

A Windows wireless client attempts to authenticate to a WAP configured with JumpCloud RADIUS and fails with error: “The connection attempt could not be completed…Go Daddy Class 2 Certification Authority is not configured as a valid trust anchor for this profile.”<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Error Details<\/h3>\n\n\n\n

The connection attempt could not be completed<\/p>\n\n\n\n

The credentials provided by the server could not be validated. We recommend that you terminate the connection and contact your administrator with the information provided in the details. You may still connect but doing so exposes you to security risk by a possible rouge server.<\/p>\n\n\n\n

Details
Radius Server: radius.jumpcloud.com<\/a>
Root CA:          Go Daddy Class 2 Certification Authority<\/p>\n\n\n\n

The server “radius.jumpcloud.com<\/a>” presented a valid certificate issued by “Go Daddy Class 2 Certification Authority” is not configured as a valid trust anchor for this profile. Further, the server “radius.jumpcloud.com<\/a>” is not configured as a valid NPS server to connect to for this profile.<\/p>\n\n\n\n

Causes<\/h2>\n\n\n\n

The client wireless configuration is using EAP\/TTLS and the JumpCloud radius certificate is not in the client’s trusted certificate store.<\/p>\n\n\n\n

Resolutions<\/h2>\n\n\n\n