Unable to configure Network Agent on iOS 14.2

Hello Ferdinand,

Thank you for contacting the Sophos Community!

Those issues were fixed on 17.5 MR11 and 18 MR1.

Most likely the iPhone device is still not trusting the certificate.

Regards,

Hello Ferdinand,

Thank you for contacting the Sophos Community!

Those issues were fixed on 17.5 MR11 and 18 MR1.

Most likely the iPhone device is still not trusting the certificate.

Regards,

Hi Emmanuel,

Thanks for getting back to me. Yeah, I'm pretty sure it's me doing something wrong here. I'm on 18.0.3 MR-3.

The root CA is definitely trusted; not entirely sure where to look for the problem tbh.

Kind Regards,

Ferdinand

Hi Emmanuel,

I'm still struggling with this issue. The self-signed cert is trusted by Windows and Mac OS, but when I use a TLS inspector on an iPhone, it complains that the certificate is missing the required 'Server Authentication' flag.

Safari on the phone seems to be happy enough to accept the certificate when I log on the the user portal (no warnings), but when I click 'Install client certificate in iOS13 and later', and get Network Agent to open it, it doesn't accept it and gives me the 'Download Error' message.

I did follow the various articles as per my original post. The only thing that is different in my case, is that the certificate was generated with a lifespan of 5 years instead of 1, as per https://support.sophos.com/articles/en_US/Knowledge/KB-000038295?r=173&ui-knowledge-components-aura-actions.KnowledgeArticleVersionCreateDraftFromOnlineAction.createDraftFromOnlineArticle=1

I might create another certificate with indeed only a 1 year lifespan, but I very much doubt that will make the difference.

Kind Regards,

Ferry

Well that's me sorted then.... I created a self-signed certificate with a 1 year lifespan, and Network Agent happily accepted that. <scratching head>