Acer Spin 5 (SP513-52N) can't/won't connect to 802.1x Wi-Fi, errors with TLS/EAP-TLS authentication

cjmc90
cjmc90 Member Posts: 3 New User
edited November 25 in Swift and Spin Series

Hello!

I've been testing with Certificate Wi-Fi in our environment using EAP-TLS, however I'm running into a peculiar issue where only the Acer Spin 5, model SP513-52N will not connect to the network. It has the same certificates and configuration as other models in our fleet (Lenovos, Dell, etc.) and they all connect just fine, but the Spin 5s in particular will not.

Some details, this is an WPA2-Enterprise network using device certificates issued from our on-prem Ruckus CloudPath server. I receive a "Can't connect to this network." error. In the RADIUS logs, I get entries such as:

"ERROR: (TLS) TLS - Alert read:fatal:access denied"

"eap_tls ERROR: (TLS) Failed reading from OpenSSL:…"

"ERROR: (TLS) Cannot continue, as the peer is misbehaving."

"ERROR: … EAP sub-module failed. Sending EAP Failure (code 4)"

I would assume this kind of issue would be more appropriate in a networking forum, but since this seems exclusive to our Acer Spin 5 model fleet, I figured I would throw this here first and see if anyone else has had a similar experience and knew any sort of fix for this. So far, I've just done usual troubleshooting in terms of running any and all updates (both Win 10 and Win 11) for OS and Drivers, and even swapped out the Wi-Fi card for known working ones from other devices, renewing the certificate each time before trying to connect.

Any help would be appreciated. Thank you!

Best Answer

  • cjmc90
    cjmc90 Member Posts: 3 New User
    Answer ✓

    Solution: It turned out to be a bug in our version of Ruckus Cloudpath ES (6.0.5816) that they have identified and addressed in the next release of the software. It has to do with RSA-PSS signature and the TPM.

    I was able to get this device working from a workaround detailed here.

    Prior to this discovery, we had tested swapping out Wi-Fi cards from other working devices here, including an Intel and a Realtek card, though not specifically the AX200.

    Happy to have figured out a resolution here! Sorry as it turned out not to be an Acer-specific error.

    Thank you!

Answers

  • StevenGen
    StevenGen ACE Posts: 12,508 Trailblazer

    See the full specs of the SP513-52N card which is the Qualcomm Atheros QCA61x4A Wireless Network Adapter NFA344A as this card is a Wi-Fi 5 and should work perfectly with your network, maybe the card is faulty and needs changing or its driver uninstalling and reinstalling, try that, Good luck.

    If this answers your question and solved your query please "Click on Yes" or "Click on Like" if you find my answer useful👍

  • billsey
    billsey ACE Posts: 34,672 Trailblazer

    That could easily be a driver issue as well, more likely than hardware IMHO. The Atheros driver Acer has on their website is from 2017 and is a W10 driver, not W11. Have you checked with Windows update for anything newer? If the Atheros drivers don't support EAP-TLS for some reason, then swapping out to a different card (like an Intel AX200) would be a decent choice.

    Click on "Like" if you find my answer useful or click on "Yes" if it answers your question.
  • cjmc90
    cjmc90 Member Posts: 3 New User
    Answer ✓

    Solution: It turned out to be a bug in our version of Ruckus Cloudpath ES (6.0.5816) that they have identified and addressed in the next release of the software. It has to do with RSA-PSS signature and the TPM.

    I was able to get this device working from a workaround detailed here.

    Prior to this discovery, we had tested swapping out Wi-Fi cards from other working devices here, including an Intel and a Realtek card, though not specifically the AX200.

    Happy to have figured out a resolution here! Sorry as it turned out not to be an Acer-specific error.

    Thank you!

  • billsey
    billsey ACE Posts: 34,672 Trailblazer

    Well, I am sure Acer isn't sorry it turned out not to be their issue! :)

    Click on "Like" if you find my answer useful or click on "Yes" if it answers your question.