Oki C9600hdn Troubleshooting Manual page 13

EAP Authentication Failure
Certificate Import Fails: An error occurs when importing client
certificates for EAP authentication and the import fails.
Possible Cause
The client certificate file
format is incorrect.
No secret key is included in
the client certificate.
Certificate hash algorithms
are not supported.
No Client Authentication has
been set in the Extended
Key Usage attribute of the
certificate.
Certificate key sizes are not
supported.
The certificate file is too big. Exceeding the size is not an import error for
The certificate file may be
incorrect or the multiple
certificates, such as a
certificate chain, may be
included.
Suggested Solution(s)
Redistribute the client certificate files in the .der
or .pem format from the certificate distribution
source.
Redistribute it from the certificate distribution
source in a format not including a secret key in
the client certificate file.
Reissue certificates using the MD5 or SHA1 hash
algorithms from the certificate issuance source.
Reissue certificates set with Client Authentication
from the certificate issuance source. (Client
Authentication is normally set for certificates
issued for EAP authentication of a wireless LAN)
Reissue certificates generated by either the 512,
1024, 2048 or 4096 bit key size from the
certificate issuance source.
regular certificate files.
Reissue the certificate from the certificate
issuance source.
13
EAP Authentication Failure