[Q] How to Prevent Wifi From Saving a Password - Android Q&A, Help & Troubleshooting

Most of the Questions around Wifi and credentials are the opposite of mine, they want to know where to find saved passwords or how to save them.
I'm trying to determine how to prevent Android from saving the Password when authenticating to a WAP, as we use expiring passwords that change every 2-3 minutes via RSA SecurID token.
At work we use:
802.1x EAP - PEAP
No Phase 2
No CA Cert
No user Cert
DO USE Identity
DO USE Password - RSA SecurID (Changes every couple minutes)
I'd like to figure out how to make droid prompt for a new password everytime it tries to Wifi Connect to a WAP at work, which can happens multiple times through out the day as I move around.
Currently, the droid saves the password (which expires every couple minutes) and then tries to use this expired password on the next reconnect, which locks out my account after a few retries.
So the options I can think of but, can't see a way to accomplish, are:
1. Don't save the password.
2. Prompt for credentials after any authentication failure.
3. Clear the saved password immediately.
Any one have any ideas?

Related

[Q] ascii wifi wep password

Is there any way to enter a wifi wep password in ascii or do I have to enter it in hex? Every time I want to enter a password I have to convert it first from ascii to hex. There must be an easier way.
The better question is does anyone really use WEP anymore? It literally takes < 2 minutes to crack every WEP protected network I've tried.
Can't you just convert it in your head :shrug:. I'm sure there is an app in the market.
use a hex password that's only composed of A-F?
DECADEDEADBEEFFACADEBADFAD

[Q] How to diasble Credential Storage?

My university Wi-Fi uses WPA2 Enterprise for security and we authenticate using the following settings:
EAP Method: PEAP
Phase 2 authentication: MSCHAPV2
CA Certificate: Thawte Premium CA
and identity and password being our student credentials.
Click to expand...
Click to collapse
I've copied that from an old unanswered thread because I have a similar issue.
How do I disable Credential Storage so I don't have to re-enter the password every time I'm back on campus. Since I'm back and forth multiple times each day, I end up having to re-enter it constantly. On my home network I used WEP, and the HTC Inspire I use connect automatically.
I'd like to be able to connect automatically to the university network as well.
audiophan said:
I've copied that from an old unanswered thread because I have a similar issue.
How do I disable Credential Storage so I don't have to re-enter the password every time I'm back on campus. Since I'm back and forth multiple times each day, I end up having to re-enter it constantly. On my home network I used WEP, and the HTC Inspire I use connect automatically.
I'd like to be able to connect automatically to the university network as well.
Click to expand...
Click to collapse
Bump. This is very annoying, and every search on Google seems to suggest you only have to specify this information once. Every single day I disconnect from my office wifi I have to put in this stupid credential storage password when I come back, which is really quite annoying.
if you do not restart the phone then the credential storage should not bother you
Looking for the same answer. Found this if your phone is rooted:
https://play.google.com/store/apps/...sMSwxLDEwMiwicnUuY2h1bmt5LkF1dG9LZXlzdG9yZSJd
And this is it is not:
https://play.google.com/store/apps/...EwMiwicnUuY2h1bmt5LktleXN0b3JlQWN0aXZhdG9yIl0.
Hope that helps.

[Q] Samsung Galaxy S 2 Exchange sync

I am having a nightmare of a time with the new Samsung Galaxy S 2, on AT&T. Initially it would not connect to Exchange 2010 using the built in account connector. A week later that now works, having changed nothing on my end. Now it connects OK, but will only allow me to set up a complex password on the device to unlock it [no PIN / swipe etc.] despite using the same policy as everyone else. On another Android I have [Atrix 4G] I can use the finger print reader, pin code & swipe pattern and switch between them fine. Our older WinMo 6.5 phones are working fine with pin numbers only. I am using the same Active Sync policy. The phone is set to lock after 10 minutes of inactivity, and I don’t want to leave it much longer than that if I can avoid it.
Ultimately I need to be able to set it up to do the swipe pattern, or at least the PIN number, some of our users need to make phone calls in the car & a complex password is not going to fly. I need the phone to sync with exchange for email, contacts, calendar & tasks, as well as the security features like full encryption & remote wipe [a must] and the recover lost password & failed logins functionality.
Any recommendations?
More Info
I created a separate Exchange ActiveSync policy. Enabled AN passwords and allow simple passwords. Rebooted devices & sysnc'd. Both were required to enter complex passwords. On the GS2 the only option was the complex password. On the Atrix the only options were the complex password & the fingerprint reader [though a complex password was required as the backup in case fingerprint was not available].
Removed requirement for AN password, still allowing simple passwords. Rebooted devices & sync'd. Now the Atrix will allow for a PIN, password & fingerprint. The SG2 will still only allow for a password.
Removed requirement for AN password and removed simple passwords. Rebooted devices & sync'd. Atrix will still allow for a PIN, password & fingerprint. The SG2 will still only allow for a password.
Removed password requirement completely [no Encryption or anything]. Rebooted devices & sync'd. Now both devices will allow for a PIN, password & nothing as well as the fingerprint on the atrix.
Turned encryption & simple password back on & now it requires a password on GS2, pin, password or fingerprint on the Atrix.
It seams that to enable encryption on the galaxy s 2 you must also use a complex password. :-(
any ideas how to get around this?

GOOGLE WI-FI paswwords sync

Hello,
i have a long time problem with my Google account. It simply dont sync (stores/restores) my Wi-Fi passwords.
when i am loged on an android device with my account, sync is turned on. Then I connect to a new wi-fi networks with password protection, then after a week or two (and other periods like three months and so) i make full wipe, flash another rom, sign in to my google account and BAM no stored wi-fi networks (like my parents, my work etc....) I have to type the passwords again. And this is long term issue (from Nexus S in 2011, trough various devices, various tablets until now).
I tried to copy the wpa_supplicant.conf file to other devices or OS versons, but even when i correct the permissions, the wifi dont turn on.
I have a particular solution. I grab always the wpa_cupplicant.conf from my latest device and make a backu pof this file. Then when I am on new ROM and i need to enter the password i copy it from the wpa_supplicant.conf file.
Is there any option how to manage stored wifi passwords trough my google account on my PC or to reset the ability to store the wifi passwords.

No 'Use System Certificates' in wifi settings

Hi,
I am connecting to my university's wifi and I am unable to use their settings. From their settings, I am to choose PEAP for EAP Method. MSCHAPV2 for phase 2 authentication and Use System Certificates for CA Certificate however my phone only gives me the options of Select Certificate and Do Not Authenticate.
Is there something I haven't installed or am I missing something.
Thanks
Did you solve this? I'm having the same
No, still haven't figured it out. Been working by using do not authenticate.
I'm monitoring this thread daily - I have to settle for a "guest" connection at my work (College) until a system cert. option becomes available - it is tremendous pain logging in all the time etc... I'm surprised this issue isn't more prevalent. This seems to be the only thread with this issue raised.
I am having the exact same issue with my university wifi login
I've also been having this exact issue trying to login to my Universities wifi really stressing me out. Hopefully a solution is found soon
Problem solved
Hi there,
I encountered exactly the same problem on my S9 and have solved it now. The problem is the system certification is not installed on our devices. The solution is quite simple. Just download and install the App "eduroam CAT", and then it will automatically search for the eduroam of your university. After inputting your user name and password, it will automatically download the required certification and directly connect to the eduroam network. Hope this helps.
doubledou said:
Hi there,
I encountered exactly the same problem on my S9 and have solved it now. The problem is the system certification is not installed on our devices. The solution is quite simple. Just download and install the App "eduroam CAT", and then it will automatically search for the eduroam of your university. After inputting your user name and password, it will automatically download the required certification and directly connect to the eduroam network. Hope this helps.
Click to expand...
Click to collapse
unfortunately i've tried that and its still not working. Glad to hear your wifi is working however
doubledou said:
Hi there,
I encountered exactly the same problem on my S9 and have solved it now. The problem is the system certification is not installed on our devices. The solution is quite simple. Just download and install the App "eduroam CAT", and then it will automatically search for the eduroam of your university. After inputting your user name and password, it will automatically download the required certification and directly connect to the eduroam network. Hope this helps.
Click to expand...
Click to collapse
Thanks! Worked for me on Galaxy A7 2017 on Android 8 (where the option "use system certificates" doesn't exist) when connecting to Eduroam on the University of São Paulo.
ssadtru said:
Hi,
I am connecting to my university's wifi and I am unable to use their settings. From their settings, I am to choose PEAP for EAP Method. MSCHAPV2 for phase 2 authentication and Use System Certificates for CA Certificate however my phone only gives me the options of Select Certificate and Do Not Authenticate.
Is there something I haven't installed or am I missing something.
Thanks
Click to expand...
Click to collapse
Can the IT department for the school provide you with a downloadable certificate file so you can choose that?
This is something they should be able to do (provided they know how)
I have an S9 and the same problem. I solved it as follows:
Since my university doesn't say where to download the CA certificate, I went to my Windows 10 laptop that was logged in to the WiFi of the uni because I think it gets downloaded when I connect with Windows (or maybe Windows asked me to confirm the certificate?).
I exported (using binary format) the CA certificate - "thawte" was the issuer
I emailed it to myself, and from my email on my phone, saved the attached certificate to Android's file system.
I imported/installed the certificate in the Android 8 system.
Finally, I chose it (it appeared in "CA Certificate" drop-down menu) when signing in to WiFi
My theory is that often University IT departments outsource WiFi to third-party companies whose main goal is to make them easy to use on Windows/MacOS. Since many people don't have the latest Android (8), they don't understand what is going on.
Ideally, the IT folks should tell you where to download the certificate (so you won't have to export it from another PC), as in the explanation given at the University of Illinois (Google the text "How to manually set up IllinoisNet on the Android OS" since XDA won't let me post links).
how were you able to find out which certificate was tied to your uni's wifi? i finally got all of the other steps down, but finding out which one is relevant is still hard for me to do.
My university advertises cat.eduroam.org as solution for no certificates. Haven't tried it myself, as I didn't need it, but worth a shot.
After upgrading to Oreo on my S7, I was having the same problem for both my Uni's wifi and with eduroam. I solved it in a similar way as TheFuhrmanator. Make sure you've connected to Uni's wifi on your Windows 10 laptop at least 1 time to make sure the connection works.
Go to the Windows 10 Certificate manager (Start -> type 'certificate' -> Manage Computer Certificates)
Expand the folder Trusted Root Certification Authorities -> Certificates
Right click USERTrust RSA Certification Authority (and maybe AddTrust External CA Root) and export them to DER Encoded Binary format. I found the exact ones to export from https://it.umn.edu/wifi-windows-10-setup-guide
Copy the exported files to phone
On phone, go to Lock Screen and Security -> Other Security Settings -> Install certificates from storage (select the option to use the certificate for WiFi)
Connect to eduroam and select USERTrust RSA Certification Authority or whatever you named it
Process that we have worked out for certificate installation and connection
This isn't eduroam-specific, but our organization created this documentation, at wifi.lihc.on.ca with the installation process. We created a PEM-encoded ".cer" for our particular certificate chain, including the root and the two other required chained certificates.
The process is relatively painless, all things considered, but still an unnecessary step where the device already has the certificate installed.
I don't have "USERTrust RSA Certification Authority" only "AddTrust External CA Root"
Hello there
Just in case anyone still has this problem. I figured it out for my specific case with both the CAMPUS and EDUROAM networks at my university. The wifi network configuration required me to select for both cases:
EAP method: PEAP
Phase 2 Authentication method: MSCHAPV2
CA certificate: Greyed out and set to "Use system certificates"
Online certificate status, Choose : DO NOT VALIDATE
Even after I typed the username and password, the connect button would be disabled and I was always requested to provide a domain address, otherwise I would not be able to connect. So I downloaded the CA certificate configuration provided at https://cat.eduroam.org/# for my school in Canada. The file you download does not do anything in android so "double-click" gives no joy . Now, my aha! moment came when I opened the file on a texteditor, somewhere around all the encrypted gibberish you will see something that says:
</CA><ServerID>xxxx.yyyy.zzz</ServerID>
I suppose that would be the certificate authority address for my school. So, I added this address in the domain address and voilá! Connect button enabled and connection working all good for both cases. I hope this gets helps whomever now. Important to mention, I found this post looking for the problem but now I have a Google Pixel 5, but I'm sure the solution will work with any android phone.
----EDIT----
I just realized something else. I noticed someone said they will just keep using the GUEST network at their school even if it meant logging in everyday which is pretty stupid and annoying at this point in time. IN MY CASE, when tried the GUEST school network as a likewise temporary solution, I would be redirected to the school's wifi portal for authentication. It turns out, this portal has the same address as the CA authority (https://xxxx.yyyy.zzz/WHATEVER?STUFF......).
My point being, if your case does not involve EDUROAM of any form to allow you to get a config file and see the CA authority address, well, it stands to reason that it is the same server for both CAMPUS and GUEST networks used for authentication. At least is worth the try this address if you are out of options.
Cheers!
Flogisto said:
Hello there
Just in case anyone still has this problem. I figured it out for my specific case with both the CAMPUS and EDUROAM networks at my university. The wifi network configuration required me to select for both cases:
EAP method: PEAP
Phase 2 Authentication method: MSCHAPV2
CA certificate: Greyed out and set to "Use system certificates"
Online certificate status, Choose : DO NOT VALIDATE
Even after I typed the username and password, the connect button would be disabled and I was always requested to provide a domain address, otherwise I would not be able to connect. So I downloaded the CA certificate configuration provided at https://cat.eduroam.org/# for my school in Canada. The file you download does not do anything in android so "double-click" gives no joy . Now, my aha! moment came when I opened the file on a texteditor, somewhere around all the encrypted gibberish you will see something that says:
</CA><ServerID>xxxx.yyyy.zzz</ServerID>
I suppose that would be the certificate authority address for my school. So, I added this address in the domain address and voilá! Connect button enabled and connection working all good for both cases. I hope this gets helps whomever now. Important to mention, I found this post looking for the problem but now I have a Google Pixel 5, but I'm sure the solution will work with any android phone.
----EDIT----
I just realized something else. I noticed someone said they will just keep using the GUEST network at their school even if it meant logging in everyday which is pretty stupid and annoying at this point in time. IN MY CASE, when tried the GUEST school network as a likewise temporary solution, I would be redirected to the school's wifi portal for authentication. It turns out, this portal has the same address as the CA authority (https://xxxx.yyyy.zzz/WHATEVER?STUFF......).
My point being, if your case does not involve EDUROAM of any form to allow you to get a config file and see the CA authority address, well, it stands to reason that it is the same server for both CAMPUS and GUEST networks used for authentication. At least is worth the try this address if you are out of options.
Cheers!
Click to expand...
Click to collapse
I'm working to resolve this for my university. What CA file are you referring to, here? The certificate does not contain a ServerID tag, and our university does not issue certificates from this eduroam page.

Categories

Resources