My Android (4.4) device has a WiFi configured which uses WPA2-TLS authentication with client certificates. I got my hands on the wpa_supplicant configuration and the relevant entry looks like this:

network={
        ssid="fobar"
        key_mgmt=WPA-EAP IEEE8021X
        eap=TLS
        identity="000123"
        password="000000"
        ca_cert="keystore://CACERT_fobar_WPA_EAPIEEE8021X_TLS_NULL"
        client_cert="keystore://USRCERT_fobar_WPA_EAPIEEE8021X_TLS_N"
        engine_id="keystore"
        key_id="USRPKEY_fobar_WPA_EAPIEEE8021X_TLS_NULL"
        engine=1
        proactive_key_caching=1
}

How can I get hold of the certificates and the key?

I'm using a Google Pixel 3a. A week ago, it was connecting all well to the corporate Wi-Fi which uses WPA Enterprise, but recently, it stopped. In order to connect, I do the following: 1. Download the ca.pem file containing the CA certificate and the .p12 file containing the device certificate. 1. Install both CA and device certificates through *Security* › *Encryption & credentials* › *Install a certificate* › *Wi-Fi certificate*. 1. Configure the Wi-Fi to use those certificates. 1. EAP method being set to TLS, just as before. As soon as I try to connect, it fails with no error message or details, **and the CA certificate gets removed** from the *User credentials* list (the ca.pem file is preserved). The behavior is the same no matter what I set in *Online certificate status* field (including “Do not validate” value that I can still use). Why would Android remove the CA certificate? What do I need to do to make it stop doing that, and use the certificate to actually open the Wi-Fi connection?

I use my office network which is a Corporate WiFi set-up secured with 802.1x (and requires me to use my company credentials - Username and Password). But when I'm back home and try to connect my home WiFi router which is protected by WPA/WPA2 PSK security (which requires just a password), I can't get it connected automatically (even if I have the network remembered). All I can do to fix it currently is; - Restart my home router several times. - Restart my phone for 2-3 times. - Forget all remembered WiFi networks on phone. and only after above steps it can connect, otherwise I get **Authentication Problem** as error if I try to connect. I'm on Android 4.2.1 (almost stock android, just some custom icons by vendor) device running on MediaTek chipset (MTK6589T), Micromax Canvas Magnus A117 to be specific. While this same problem is with my other friends as well who use our company network at office in their phones (which are varied from Samsung, Sony, and even Nexus). What can I do to avoid this daily hassle when I return home and connect home WiFi?

I am doing some product development for BYOD environment, so I require a wide variety of devices. This one is causing me some issues with connectivity to the private network where I have to test. The LG device with Android version 2.3.3 and upgraded firmware to whatever latest Sprint is supporting connects to the Wireless Access Point, but I get a 401 Unauthorized when access from a server on this private network. Meanwhile, the same configuration works with my iPad-1, an Android running Ice Cream, iPhones, Win Mobile, etc. using the same settings. I am suspect that this device is too old to support WPA2-Enterprise but I cannot find any documentation, forum, etc. that supports any related issues. I do not have access to the server to see why it is rejecting with the 401. Any suggestions on how to troubleshoot/fix or officially lay claim of non-support?

When trying to connect to a WPA2 network from an HTC Hero running 2.1, I can't connect if the hidden SSID has a space in the name. Has anyone else encountered this problem? Is it known to be an Android issue?

Today, there was disclosure about [Krack Attacks](krackattacks.com) that affect WPA2. The attacks are primarily executed against end-point devices (phones, laptops). In many cases, you can patch your router. The way the vulnerability works, according to the website author: > This means a patched client can still communicate with an unpatched access point, and vice versa. In cases where the router is patched, we're cool. But sometimes, I have access to WiFi networks outside of my control, and I can't guarantee they're patched. For these cases, it makes sense to patch my device -- but (based on the Linux driver source), for my specific phone (and I'm sure many others), I don't forsee updates ever becoming available -- we just don't get updates. In these cases, what can I do to minimize or mitigate the risk of this attack? Someone recommended using HTTPS Everywhere, which is (unfortunately) only available in Firefox on Android.

My new Nexus 6p won't connect to the WiFi network at school, a WPA2 PSK network(802.1x EAP). It only says "Trying to connect..."("Verbinding maken" in Dutch). I think this will be a common problem, so that's why I am asking it here. Groetjes, Arend-Jan PS: Yes I have got the right ID and password.

I'm trying to connect to a DLink Router protected with WPA/WPA2. It's our home router and I can connect perfectly to it from laptops and desktops, Linux and Windows alike, even for my friends mobile(Android) it connect smoothly. But when I connect to it using my Android phone (Motorola Droid), I am always notified to "Sign-in to WiFi Network" after I've entered the WPA/WPA2 password. Tapping into the notification loads my ACT logging page, and after entering my credentials it says you are now logged in, but when I try to open any other site or even refresh this page it again ask me for my ACT credentials. Other apps that connect to the internet do report connection problems. I checked my router setting, in which I have added my mobiles MAC address also in Interface setup->wireless->wireless MAC address filters, but it is not working. I have made encapsulation ISP as PPPoE and have entered my password there. Still not able to connect in my phone. I am able to connect my phone in all in my friends place so for sure thire is no problem with my phone. what else is required..?

I have a strange problem with Wi-Fi with my Sony Xperia. I can't connect to most of the networks I have tried, but the list of networks is ok (but somehow slowly loaded). **It stopped working suddenly after a week**. My previously used networks are all marked as "Saved", but when I try to connect the following happens: 1. Saved (doesn't even change when tapped) 2. Connecting -> Saved 3. Connecting -> Authentication problem -> Saved This is what I have tried to fix it: 1. Restart phone 2. Restart phone, take out battery, SD card and SIM card 3. Restart wi-fi router 4. Connect to another network (sometimes works with some networks) 5. Forget network -> Type password again 6. Connect another Android device to the same network 7. Connect another non-android device to the same network 8. Change the router wireless settings to WEP, WPA and unsecured 9. Factory reset of the router 10. Sony Companion -> Repair 11. Factory reset of the phone Router: D-Link DIR-615 Phone: Sony Xperia ZR C5502 Android version: 4.1.2 Baseband: 9x15A-ACEFWMAZQ-30110041-29 Build number: 10.1.1.A.1.310 Kernel: 3.4.0-g6df7905-02327-g1aa3092 BuildUser@BuildHost) ) #1 SMP PREEMPT Thu Apr 11 11:17:13 2013 Log after turning on the wifi and trying to connect: 09-18 09:10:08.116: I/WifiManager(2391): Process ndroid.settings enabled Wifi 09-18 09:10:08.186: E/WifiHW(571): File "/data/misc/wifi/WCNSS_qcom_cfg.ini" exists, not copying 09-18 09:10:08.497: I/wpa_supplicant(3838): nl80211: Don't connect to APs with RSSI < 0 09-18 09:10:08.497: I/wpa_supplicant(3838): rfkill: Cannot open RFKILL control device 09-18 09:10:08.497: I/ActivityManager(571): No longer want com.google.android.onetimeinitializer (pid 1747): hidden #51 09-18 09:10:08.637: I/wpa_supplicant(3838): wapi_supplicant_init: Init WAI packet p2p0 09-18 09:10:08.637: I/wpa_supplicant(3838): Own MAC address: (Here's phone MAC address) 09-18 09:10:08.637: E/wpa_supplicant(3838): Initialization: WAPI:set Staues=1 09-18 09:10:08.657: E/Diag_Lib(3838): Diag_LSM_Init: Failed to open handle to diag driver, error = 13 09-18 09:10:08.757: E/wpa_supplicant(3838): QMI_UIM_EVENT_REG_REQ_V01, qmi_err_code: 0x0 09-18 09:10:08.777: E/wpa_supplicant(3838): QMI_UIM_GET_CARD_STATUS_REQ_V01, qmi_err_code: 0x0 09-18 09:10:08.777: E/wpa_supplicant(3838): card_info[i].card_state: 0x1 09-18 09:10:08.777: E/wpa_supplicant(3838): card_info[i].error_code: 0x0 09-18 09:10:08.777: E/wpa_supplicant(3838): card READY 09-18 09:10:08.777: E/wpa_supplicant(3838): card_info[i].app_type : 0x2 09-18 09:10:08.777: E/wpa_supplicant(3838): card_info[i].app_state : 0x7 09-18 09:10:08.777: E/wpa_supplicant(3838): card found 09-18 09:10:08.797: I/wpa_supplicant(3838): Reading GSM home network domain configuration file '/system/etc/wifi/gsm_domains.conf' 09-18 09:10:08.877: I/wpa_supplicant(3838): nl80211: Don't connect to APs with RSSI < -83 09-18 09:10:08.877: I/wpa_supplicant(3838): rfkill: Cannot open RFKILL control device 09-18 09:10:08.917: I/wpa_supplicant(3838): wapi_supplicant_init: Init WAI packet wlan0 09-18 09:10:08.917: I/wpa_supplicant(3838): Own MAC address: (Here's phone MAC address) 09-18 09:10:08.917: E/wpa_supplicant(3838): Initialization: WAPI:set Staues=1 09-18 09:10:08.957: E/wpa_supplicant(3838): QMI_UIM_EVENT_REG_REQ_V01, qmi_err_code: 0x0 09-18 09:10:08.977: E/wpa_supplicant(3838): QMI_UIM_GET_CARD_STATUS_REQ_V01, qmi_err_code: 0x0 09-18 09:10:08.977: E/wpa_supplicant(3838): card_info[i].card_state: 0x1 09-18 09:10:08.977: E/wpa_supplicant(3838): card_info[i].error_code: 0x0 09-18 09:10:08.977: E/wpa_supplicant(3838): card READY 09-18 09:10:08.977: E/wpa_supplicant(3838): card_info[i].app_type : 0x2 09-18 09:10:08.977: E/wpa_supplicant(3838): card_info[i].app_state : 0x7 09-18 09:10:08.977: E/wpa_supplicant(3838): card found 09-18 09:10:09.037: E/WifiConfigStore(571): Failed to look-up a string: W 09-18 09:10:09.037: E/WifiConfigStore(571): Failed to look-up a string: SMS4 09-18 09:10:09.037: E/WifiConfigStore(571): Failed to look-up a string: SMS4 09-18 09:10:09.077: I/WifiManager(2391): Process ndroid.settings requested an active scan 09-18 09:10:09.087: E/Parcel(334): Reading a NULL string not supported here. 09-18 09:10:09.087: E/Parcel(334): Reading a NULL string not supported here. 09-18 09:10:09.097: E/Parcel(334): Reading a NULL string not supported here. 09-18 09:10:09.097: I/SuperStamina-WifiAnalyzer(571): WiFi is ON. 09-18 09:10:09.117: E/wifidirect(3726): onStartCommand 1 09-18 09:10:09.117: E/wifidirect(3726): Exitting file transfer service. 09-18 09:10:09.117: W/wpa_supplicant(3838): wlan0: Failed to initiate AP scan 09-18 09:10:09.117: W/wpa_supplicant(3838): p2p0: Failed to initiate AP scan 09-18 09:10:09.127: E/wifidirect(3726): onStartCommand 1 09-18 09:10:09.127: E/wifidirect(3726): Exitting file transfer service. 09-18 09:10:10.128: W/wpa_supplicant(3838): wlan0: Failed to initiate AP scan 09-18 09:10:11.119: W/wpa_supplicant(3838): wlan0: Failed to initiate AP scan 09-18 09:10:12.130: W/wpa_supplicant(3838): wlan0: Failed to initiate AP scan 09-18 09:10:12.811: I/wpa_supplicant(3838): wlan0: Trying to associate with (here is my router MAC) (SSID='smartus@unifi' freq=2427 MHz) 09-18 09:10:14.023: I/wpa_supplicant(3838): wlan0: CTRL-EVENT-ASSOC-REJECT bssid=(here is my router MAC) status_code=1 09-18 09:10:19.088: I/WifiManager(2391): Process ndroid.settings requested an active scan 09-18 09:10:22.812: I/wpa_supplicant(3838): wlan0: Authentication with (here is router MAC) timed out. These lines will later repeat: 09-18 09:10:12.811: I/wpa_supplicant(3838): wlan0: Trying to associate with (here is my router MAC) (SSID='smartus@unifi' freq=2427 MHz) 09-18 09:10:14.023: I/wpa_supplicant(3838): wlan0: CTRL-EVENT-ASSOC-REJECT bssid=(here is my router MAC) status_code=1 09-18 09:10:19.088: I/WifiManager(2391): Process ndroid.settings requested an active scan 09-18 09:10:22.812: I/wpa_supplicant(3838): wlan0: Authentication with (here is router MAC) timed out. Any ideas what could cause CTRL-EVENT-ASSOC-REJECT? I believe this is usually happening when the network is congested (there are only 3 devices, 2 of them work. The phone won't work in the network alone neither).

I'm trying to connect to a wireless internet I've got the user id and password for. The network uses WPA2 enterprise encryption and Cisco:Leap authentication. How can I connect? On my laptop I do this using a program by ThinkVantage technologies called Access Connections but on the Android built in wireless networks there aren't enough options. Android version: 4.0.4 with JJHybrid custom rom (and rooted)

can we get android devices in ad-hoc mode using WIFI-card but without access internet ? i mean to connect peers to send and receive messages between them but without having internet connection ? i see this link talk about wpa_supplicant.conf to enable ad-hoc mode, but it seems that there are problems in this thing. and see this command iwconfig but this doesn't support on android !!

I need to setup a 802.1x EAP Wi-Fi network on a JellyBean device (Motorola Moto G). The network is managed by the university, and they are using eduroam. In the university configuration guide they show how to setup a TTLS-PAP connection. The problem is, in my device, the only options available in the phase 2 authentication spinner are None, MSCHAPV2 and GTC. The configuration guide shows screenshots for gingerbread devices where PAP is also available. I've been googling a bit and seems that some ICS devices also have it available. Could this be a problem of this particular device? Or could it be a problem of all JellyBean devices? Is this option available in KitKat? Thanks in advance. ---------- UPDATE
I've checked this option is shown in an old gingerbread phone. Also being shown in a 4.1 tablet.

I'm trying to connect to a DLink Router protected with WPA/WPA2. It's our home router and I can connect perfectly to it from laptops and desktops, Linux and Windows alike. But when I connect to it using my Android phone (XPeria Z), I am always notified to "Sign-in to WiFi Network" after I've entered the WPA/WPA2 password. Tapping into the notification loads a 404 page from my router. Then, from my browser, trying to load any website just keeps looping to this 404 page. Other apps that connect to the internet do report connection problems. Being that I'm not on a data plan and always connect via WiFi, I can't install any diagnostic tools unfortunately. FWIW, I've ensured that the connection to my router _does not use_ WiFi Protected Set-up. I've also tried connecting to the router through an old Samsung Galaxy Y, with Android 2.x to same results. I wonder if this is a problem with my phones or with my router?

I want to use a Samsung device (4.1.2) within WPA2-Enterprise. When I install a certificate in order to connect to the RADIUS server, the phone immediately wants me to set up a PIN to lock it. I can't disable this setting afterwards, only by removing the certificate. Which locks me out of the wifi. Is there any way to deactivate this behaviour of android and to keep the phone usable without entering a PIN to unlock it?

I have a technical question to the android os. A phone doesn't have to have some PIN or other unlocking options but what exactly happens when you take this phone into a MDM solution such as MobileIron? It gives you some policies and somehow you are forced to take a PIN. Is this because of the policy or because of the android OS which says: "oh you want to use certificates, well I do not allow you to use them without a PIN". the phone uses wpa2-enterprise

Where can I get details about access point opened by my Nexus 4? I need them to describe network in **wpa_supplicant.conf** on other device that will be using this network. network={ ssid="example" proto=RSN key_mgmt=WPA-EAP pairwise=CCMP TKIP group=CCMP TKIP eap=TLS identity="user@example.com" ca_cert="/etc/cert/ca.pem" client_cert="/etc/cert/user.pem" private_key="/etc/cert/user.prv" private_key_passwd="password" priority=1 }

In some travel destinations, free wireless APs with simple WEP or WPA PSK passwords are common place. Every hotel, cafe, and so on has one. However, language barriers can make it difficult to communicate the password. Common mistakes include "A" vs. "a", "y" vs. "i", "c" vs. "z", "1" vs. "7", "O" (letter) vs. "0" (number). Frequently, you'll find travellers guessing and discussing passwords. Is there are more efficient solution than manual trial-and-error? I'm looking for an app or other solution, that * saves the hassle of retyping the same password and variations thereof by remembering previous guesses, * gives faster, better feedback if the connection with the current password fails (weak signal or wrong password?), * can efficiently try a number of passwords (variations of the password I entered or default passwords from a dictionary). I'm not interested in cracking a network with strong security. I want to get connected quickly if the waiter tells me "It's just oh, one, two, a, be, zee" while he's on his way to the next table. An efficient WEP or WPA2 cracker would get the job done, but for this purpose it's not required to crack strong passwords.

At the place I work, everyone can log on to the wifi network with an iPhone. They just need to add a new network, type in the network name and choose wpa2 enterprise and then add their username and password (their own unique). Everybody else with Android phones hasn't been able to connect, and it seems like they've tried for a long time. I have to buy a new phone this weekend, and I don't really want to buy an iPhone. So I was hoping if somebody knew if the Samsung Galaxy Nexus (or any Android 4.0 device) has better wifi support than the older Android versions? Sorry I don't know anything else technical about the wifi at work.

My Galaxy S2 (ICS I9100G) connects to my home wifi but sometimes does not actually transmit data. I took it to the shop and they did a factory reset (which I could have done on my own) and then was told to take it home and see if it was any better. It wasn't. O2 tech support didn't really have much to offer so I tried various different online fixes. None worked. We got another router (for the back of the house) which used WPA2 whereas the initial router uses WPA. My SGS2 works absolutely fine on this new router. What's going on?

I have this weird problem with my Nexus 7: When the WiFi network on the home router (AirTies) is set to WPA/WPA2 it is always stuck in the "login" phase and never actually connects to the network. The network icon shows that it continuously connects and disconnects. Now if I switch the network to WPA2 only, the Nexus 7 connects fine. But then, a Mac on the same network keeps forgetting the network and I have to insert the key by hand every time it boots. Switching back to WPA/WPA2 simply reverses the problem. I accept even suggestions to switch the ADSL/WiFi router, provided that you suggest one that you know works for both machines.