HP MSM750 Access Controller and Windows Server Ent 2008

[Mike Van Slambrouck_1]

Hello,

I'm running into a problem with the HP MSM750 Access Controller and Windows Server Ent 2008. I have configured the access controller as a radius client in NPS services on Windows Server Ent 2008; at this point the controller communicates to the radius server and the radius connects to the controller. Now when configuring a workstation to authenticate through the access controller I receive the following event in the event log on the radius server.


Log Name: Security
Source: Microsoft Windows Security
Event ID: 6274
Level: Information


Network Policy Server discarded the request for a user.

Contact the Network Policy Server administrator for more information.

User:
Security ID: DOMAIN\USER
Account Name: USER
Account Domain: DOMAIN
Fully Qualified Account Name: DOMAIN /OU/OU/OU/USER

Client Machine:
Security ID: NULL SID
Account Name: -
Fully Qualified Account Name: -
OS-Version: -
Called Station Identifier: 00-00-00-00-00-00
Calling Station Identifier: 00-00-00-00-00-00

NAS:
NAS IPv4 Address: IP ADDRESS
NAS IPv6 Address: -
NAS Identifier: NAME
NAS Port-Type: Wireless - IEEE 802.11
NAS Port: 1

RADIUS Client:
Client Friendly Name: NAME
Client IP Address: IP ADDRESS

Authentication Details:
Proxy Policy Name: Secure Wireless Connections
Network Policy Name: Secure Wireless Connections
Authentication Provider: Windows
Authentication Server: SERVER
Authentication Type: EAP
EAP Type: -
Account Session Identifier: ID
Reason Code: 1
Reason: An internal error occurred. Check the system event log for additional information.

Microsoft TechNet Link
http://technet.microsoft.com/en-us/library/cc735339(WS.10).aspx

Here is information about my access controller.

HP MSM750 Access Controller
Software version: 5.2.6.0-01-7057

Has anyone else had this problem with the HP MSM750 Access Controller and Windows Server Ent 2008?

P.S. This thread has been moved from Communications, Wireless (Legacy ITRC forum) to MSM Series. -HP Forum Moderator

[Mike Van Slambrouck_1]

While working with HP on this issue we have found the fix for this problem. Also here is the case number to reference the problem 4600138448.

The NPS server or server's need to have Active Directory Certificate Services installed and configured for certificate autoenrollment. Once configured users authenticate correctly.

Microsoft Server Certificate Deployment
http://technet.microsoft.com/en-us/library/cc753712(WS.10).aspx

Microsoft Deploying 802.1X Authenticated
Wireless Access with PEAP-MS-CHAP v2
http://technet.microsoft.com/en-us/library/dd183603(WS.10).aspx