iPad enrollment with Intune (SCEP) Not connecting to WiFi

Question

Hi,

I hope someone can help.

I am currently trying to setup iOS device (iPad's) enrollment within Intune. I cannot seem to get the device to automatically connect to the company WiFi using the WiFi profile within Intune.

I have profiles for the following: -
Root CA Certificate (Trusted Certificate Profile)
Intermediate Certificate (Trusted Certificate Profile)
Certificate from our RADIUS server (Trusted Certificate Profile)
SCEP Certificate Profile (Details below)
-- Cert type - Device
-- Subject Name Format - CN={{AAD_Device_ID}}
-- Subject Alternative Name - UPN & DNS
-- Key Usage - Both Digital Signature & Key Encipherment
-- Key Size - 2048 bits
-- Root CA (Trusted Certificate Above)
-- Extended Key Usage - Client Authentication
-- SCEP Server URL - URL to SCEP Server

All of these profiles are successfully being pushed to the iPad and i can see the certificates on the device. I can also see the certificates being issued on the CA server.

When i click on the WiFi name to try and join it, i get the 'Unable to join xxxx' error.

I have connected the iPad to a Mac and have access to the debugging and error messages on Console. I can see the following messages:-

• Process - wifid - 'Attempting to join EAP network: (SSID of WiFi network)
• Process - wifid - 'WiFiSecurityCopyNonSyncablePassword: Attempting to fetch non-syncable password for account (SSID)
• Process - wifid - 'WiFiSecurityCopyNonSyncablePassword: [SSID] Error result -25300

I have tried googling these error messages with little success. Does anyone know what Error -25300 means or has anyone had any success with enrolling iPads with Intune?

Many thanks

Answer 1

@Lewis, Thanks for posting in Q&A. Based on my researching, I find the error code -25300 in the context of WiFiSecurityCopyNonSyncablePassword typically indicates that the item was not found.

From your description, I know we use certificate to authenticate. Please check what is the EAP type we configure in WiFi profile, is it EAP-TLS? Please also check the settings under this are also configured correctly after confirming with your WiFi support.

https://learn.microsoft.com/en-us/mem/intune/configuration/wi-fi-settings-ios#enterprise-profiles

Please check the above information and if there's any update feel free to let us know.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.