Applies to: Centrify DirectControl version 5.1.1 and above on Mac OS X 10.7 and higher.
One or both of the following GPs are being used to configure 802.1x authentication for Mac systems:
However, after the GP has been applied, the expected profiles are not being created on the Mac.
What else needs to be verified for these GPs to create the 802.1x profiles?
The most common mistake when this happens is that the "Template Name" in the GP has been filled in incorrectly.
If spaces were used when naming the certificate - then the certificate template name will remove these spaces:
When configuring the GP - make sure to use the "Template Name" and not the "Template Display Name":
- The "Enable Wi-Fi Profile" group policy will only install the profile if the Mac system has a valid Wi-Fi interface installed. If the system does not have Wi-Fi capabilities (such as when the machine is a Virtual Machine), then the profile will not appear.
- The same is also true for the "Enable Ethernet Profile" GP and the requirement for a valid Ethernet interface to be installed.
- If the certificate can be found in the cache folder, but does not appear in Keychain Access, see:
- For those who are still experiencing issues and have version 5.2.2 of the Mac agent installed, please see also the following KB: