802.1X authentication failure on enterprise Wi-Fi

What is 802-1X-AUTH-FAIL?

802.1X authentication failure on enterprise Wi-Fi ranks as a high-severity Windows operating system issue in our database. Cannot connect to corporate or university Wi-Fi that uses 802.1X (RADIUS) authentication. Windows prompts for credentials repeatedly. The usual suspects are expired or untrusted certificate on the client and network Policy Server (NPS) rejecting connection. Follow the steps below to fix it.

Common Causes

• Expired or untrusted certificate on the client
• Wrong EAP type configured in Wi-Fi profile
• Network Policy Server (NPS) rejecting connection

Step-by-Step Fix Guide

• 1
  Import the correct CA certificate from IT department

  "Import the correct CA certificate from IT department" targets expired or untrusted certificate on the client, one of the documented causes of 802-1X-AUTH-FAIL.

• 2
  Delete the existing Wi-Fi profile and reconnect, entering the correct credentials

  "Delete the existing Wi-Fi profile and reconnect, entering the correct credentials" targets wrong EAP type configured in Wi-Fi profile, one of the documented causes of 802-1X-AUTH-FAIL.

• 3
  Verify the RADIUS server certificate is valid

  This step, "Verify the RADIUS server certificate is valid", specifically rules out expired or untrusted certificate on the client.

Commands & Diagnostics

Frequently Asked Questions