Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. You are repeatedly prompted for credentials when you access intranet sources by using certification-based SSO in Windows

You are repeatedly prompted for credentials when you access intranet sources by using certification-based SSO in Windows

View products that this article applies to.

This article describes an issue that occurs when you access intranet sources in Windows 8.1, Windows RT 8.1, or Windows Server 2012 R2.A hotfix is available to resolve this issue. The hotfix has a prerequisite. Additional steps of configuration are required to enable this hotfix after installation.

↑ Back to the top

Symptoms

This issue occurs when you connect a non-domain joined computer to a domain network through Wi-Fi.

Note SSO means Single Sign-On.

↑ Back to the top

Resolution

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there is a "Hotfix Download Available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft website:
http://support.microsoft.com/contactus/?ws=support
Note The "Hotfix Download Available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this update, you must have update 2919355 installed in Windows 8.1 or Windows Server 2012 R2.

Registry information

To use the hotfix in this package, you do not have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace a previously released hotfix.
File information
The global version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows 8.1 and Windows Server 2012 R2 file information and notes

Important Windows 8.1 hotfixes and Windows Server 2012 R2 hotfixes are included in the same packages. However, hotfixes on the Hotfix Request page are listed under both operating systems. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 8.1/Windows Server 2012 R2" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    VersionProductMilestoneService branch
    6.3.960 0.16 xxxWindows RT 8.1RTMGDR
    6.3.960 0.17 xxxWindows RT 8.1, Windows 8.1, and Windows Server2012 R2RTMGDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information" section. MUM, MANIFEST, and the associated security catalog (.cat) files, are very important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
For all supported x86-based versions of Windows 8.1
File nameFile versionFile sizeDateTimePlatform
Baseeapmethodconfig.xsdNot applicable61218-Jun-201312:21Not applicable
Baseeapmethodusercredentials.xsdNot applicable64818-Jun-201312:21Not applicable
Eapcommon.xsdNot applicable75218-Jun-201312:21Not applicable
Eapgenericusercredentials.xsdNot applicable1,13218-Jun-201312:21Not applicable
Eaphostconfig.xsdNot applicable1,27518-Jun-201312:21Not applicable
Eaphostusercredentials.xsdNot applicable1,35318-Jun-201312:21Not applicable
Eapp3hst.dll6.3.9600.17640250,88023-Jan-201503:04x86
Eappcfg.dll6.3.9600.17640278,01623-Jan-201502:46x86
Eappgnui.dll6.3.9600.1764091,64823-Jan-201503:20x86
Eapphost.dll6.3.9600.17640266,75223-Jan-201502:56x86
Eappprxy.dll6.3.9600.1741556,32029-Oct-201400:59x86
Ttlsauth.dll6.3.9600.17640163,32823-Jan-201502:57x86
Ttlscfg.dll6.3.9600.17415236,03229-Oct-201400:51x86
Ttlsext.dll6.3.9600.1741513,82429-Oct-201401:00x86
Eapprovp.dll6.3.9600.1764024,57623-Jan-201503:07x86
Raschap.dll6.3.9600.17640425,47223-Jan-201502:56x86
Raschapext.dll6.3.9600.1741510,75229-Oct-201400:59x86
Rastls.dll6.3.9600.17640529,92023-Jan-201502:51x86
Rastlsext.dll6.3.9600.1741510,24029-Oct-201400:59x86
For all supported x64-based versions of Windows 8.1 and of Windows Server 2012 R2
File nameFile versionFile sizeDateTimePlatform
Baseeapmethodconfig.xsdNot applicable61218-Jun-201314:46Not applicable
Baseeapmethodusercredentials.xsdNot applicable64818-Jun-201314:46Not applicable
Eapcommon.xsdNot applicable75218-Jun-201314:46Not applicable
Eapgenericusercredentials.xsdNot applicable1,13218-Jun-201314:46Not applicable
Eaphostconfig.xsdNot applicable1,27518-Jun-201314:46Not applicable
Eaphostusercredentials.xsdNot applicable1,35318-Jun-201314:46Not applicable
Eapp3hst.dll6.3.9600.17640331,77623-Jan-201503:45x64
Eappcfg.dll6.3.9600.17640345,60023-Jan-201503:17x64
Eappgnui.dll6.3.9600.17640102,91223-Jan-201504:11x64
Eapphost.dll6.3.9600.17640339,45623-Jan-201503:32x64
Eappprxy.dll6.3.9600.1741570,65629-Oct-201401:19x64
Ttlsauth.dll6.3.9600.17640223,23223-Jan-201503:35x64
Ttlscfg.dll6.3.9600.17415309,24829-Oct-201401:05x64
Ttlsext.dll6.3.9600.1741516,38429-Oct-201401:21x64
Eapprovp.dll6.3.9600.1764029,18423-Jan-201503:50x64
Raschap.dll6.3.9600.17640465,40823-Jan-201503:33x64
Raschapext.dll6.3.9600.1741512,80029-Oct-201401:19x64
Rastls.dll6.3.9600.17640606,20823-Jan-201503:23x64
Rastlsext.dll6.3.9600.1741512,28829-Oct-201401:19x64
Eapp3hst.dll6.3.9600.17640250,88023-Jan-201503:04x86
Eappcfg.dll6.3.9600.17640278,01623-Jan-201502:46x86
Eappgnui.dll6.3.9600.1764091,64823-Jan-201503:20x86
Eapphost.dll6.3.9600.17640266,75223-Jan-201502:56x86
Eappprxy.dll6.3.9600.1741556,32029-Oct-201400:59x86
Ttlsauth.dll6.3.9600.17640163,32823-Jan-201502:57x86
Ttlscfg.dll6.3.9600.17415236,03229-Oct-201400:51x86
Ttlsext.dll6.3.9600.1741513,82429-Oct-201401:00x86
Eapprovp.dll6.3.9600.1764024,57623-Jan-201503:07x86
Raschap.dll6.3.9600.17640425,47223-Jan-201502:56x86
Raschapext.dll6.3.9600.1741510,75229-Oct-201400:59x86
Rastls.dll6.3.9600.17640529,92023-Jan-201502:51x86
Rastlsext.dll6.3.9600.1741510,24029-Oct-201400:59x86
For all supported ARM-based versions of Windows 8.1
File nameFile versionFile sizeDateTimePlatform
Baseeapmethodconfig.xsdNot applicable61218-Jun-201314:48Not applicable
Baseeapmethodusercredentials.xsdNot applicable64818-Jun-201314:48Not applicable
Eapcommon.xsdNot applicable75218-Jun-201314:48Not applicable
Eapgenericusercredentials.xsdNot applicable1,13218-Jun-201314:48Not applicable
Eaphostconfig.xsdNot applicable1,27518-Jun-201314:48Not applicable
Eaphostusercredentials.xsdNot applicable1,35318-Jun-201314:48Not applicable
Eapp3hst.dll6.3.9600.17640248,32023-Jan-201503:08Not applicable
Eappcfg.dll6.3.9600.17640253,95223-Jan-201502:55Not applicable
Eappgnui.dll6.3.9600.1764092,16023-Jan-201503:20Not applicable
Eapphost.dll6.3.9600.17640245,76023-Jan-201503:02Not applicable
Eappprxy.dll6.3.9600.1764058,88023-Jan-201503:07Not applicable
Ttlsauth.dll6.3.9600.17640155,64823-Jan-201503:04Not applicable
Ttlscfg.dll6.3.9600.16384231,42422-Aug-201302:02Not applicable
Ttlsext.dll6.3.9600.1638412,80022-Aug-201302:14Not applicable
Eapprovp.dll6.3.9600.1764022,01623-Jan-201503:10Not applicable
Raschap.dll6.3.9600.17640399,87223-Jan-201503:03Not applicable
Raschapext.dll6.3.9600.1638410,75222-Aug-201302:13Not applicable
Rastls.dll6.3.9600.17640473,60023-Jan-201502:58Not applicable
Rastlsext.dll6.3.9600.1638410,75222-Aug-201302:13Not applicable

Additional file information

Additional file information for Windows 8.1 and for Windows Server 2012 R2
Additional files for all supported x86-based versions of Windows 8.1
File propertyValue
File nameX86_1aa119e6d74f41632ce4dd748676545d_31bf3856ad364e35_6.3.9600.17640_none_d9081ac8e564d4e3.manifest
File versionNot applicable
File size732
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameX86_46cc805c26a02277329aac145c74c12d_31bf3856ad364e35_6.3.9600.17640_none_918866b91ae47b6b.manifest
File versionNot applicable
File size695
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameX86_4b4d785ab732156f032f5e531185707f_31bf3856ad364e35_6.3.9600.17640_none_614c6f7d8fe5a4c8.manifest
File versionNot applicable
File size694
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameX86_b673f2161e2694c54495d33d32dc8da2_31bf3856ad364e35_6.3.9600.17640_none_696bcfaba5e07380.manifest
File versionNot applicable
File size695
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameX86_microsoft-windows-e..-protocol-host-peer_31bf3856ad364e35_6.3.9600.17640_none_f8da7d25dee6f99f.manifest
File versionNot applicable
File size29,571
Date (UTC)23-Jan-2015
Time (UTC)20:44
PlatformNot applicable
File nameX86_microsoft-windows-eapttls_31bf3856ad364e35_6.3.9600.17640_none_b7dd0bef743211af.manifest
File versionNot applicable
File size17,882
Date (UTC)23-Jan-2015
Time (UTC)20:44
PlatformNot applicable
File nameX86_microsoft-windows-raschap_31bf3856ad364e35_6.3.9600.17640_none_a785f4fe92c9481a.manifest
File versionNot applicable
File size14,153
Date (UTC)23-Jan-2015
Time (UTC)20:44
PlatformNot applicable
File nameX86_microsoft-windows-rastls_31bf3856ad364e35_6.3.9600.17640_none_012c1de76ba0b181.manifest
File versionNot applicable
File size18,718
Date (UTC)23-Jan-2015
Time (UTC)20:44
PlatformNot applicable
Additional files for all supported x64-based versions of Windows 8.1 and of Windows Server 2012 R2
File propertyValue
File nameAmd64_2e5118fc7e5b91d3cf0ca20afe49f73f_31bf3856ad364e35_6.3.9600.17640_none_b2ee917a61261d42.manifest
File versionNot applicable
File size736
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameAmd64_46cc805c26a02277329aac145c74c12d_31bf3856ad364e35_6.3.9600.17640_none_eda7023cd341eca1.manifest
File versionNot applicable
File size697
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameAmd64_4b4d785ab732156f032f5e531185707f_31bf3856ad364e35_6.3.9600.17640_none_bd6b0b01484315fe.manifest
File versionNot applicable
File size696
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameAmd64_b673f2161e2694c54495d33d32dc8da2_31bf3856ad364e35_6.3.9600.17640_none_c58a6b2f5e3de4b6.manifest
File versionNot applicable
File size697
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameAmd64_e7c682952bdea9c2f6adb7be1ef9a592_31bf3856ad364e35_6.3.9600.17640_none_3c1c9642d28d3d4f.manifest
File versionNot applicable
File size736
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameAmd64_ecf1ed686a93f09825589e2bd748e0ce_31bf3856ad364e35_6.3.9600.17640_none_2b155f58f90a3c3d.manifest
File versionNot applicable
File size698
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameAmd64_eee2b8066bd5f31984f23a7b6b06f50b_31bf3856ad364e35_6.3.9600.17640_none_8ac188974106b304.manifest
File versionNot applicable
File size699
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameAmd64_fa4fc6d2bf7bc6f751a073f0ad410bf2_31bf3856ad364e35_6.3.9600.17640_none_1155d6385ee2453f.manifest
File versionNot applicable
File size699
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameAmd64_microsoft-windows-e..-protocol-host-peer_31bf3856ad364e35_6.3.9600.17640_none_54f918a997446ad5.manifest
File versionNot applicable
File size29,575
Date (UTC)23-Jan-2015
Time (UTC)20:48
PlatformNot applicable
File nameAmd64_microsoft-windows-eapttls_31bf3856ad364e35_6.3.9600.17640_none_13fba7732c8f82e5.manifest
File versionNot applicable
File size17,886
Date (UTC)23-Jan-2015
Time (UTC)20:48
PlatformNot applicable
File nameAmd64_microsoft-windows-raschap_31bf3856ad364e35_6.3.9600.17640_none_03a490824b26b950.manifest
File versionNot applicable
File size14,157
Date (UTC)23-Jan-2015
Time (UTC)20:48
PlatformNot applicable
File nameAmd64_microsoft-windows-rastls_31bf3856ad364e35_6.3.9600.17640_none_5d4ab96b23fe22b7.manifest
File versionNot applicable
File size18,722
Date (UTC)23-Jan-2015
Time (UTC)20:48
PlatformNot applicable
File nameWow64_microsoft-windows-e..-protocol-host-peer_31bf3856ad364e35_6.3.9600.17640_none_5f4dc2fbcba52cd0.manifest
File versionNot applicable
File size24,851
Date (UTC)23-Jan-2015
Time (UTC)20:48
PlatformNot applicable
File nameX86_microsoft-windows-eapttls_31bf3856ad364e35_6.3.9600.17640_none_b7dd0bef743211af.manifest
File versionNot applicable
File size17,882
Date (UTC)23-Jan-2015
Time (UTC)20:48
PlatformNot applicable
File nameX86_microsoft-windows-raschap_31bf3856ad364e35_6.3.9600.17640_none_a785f4fe92c9481a.manifest
File versionNot applicable
File size14,153
Date (UTC)23-Jan-2015
Time (UTC)20:48
PlatformNot applicable
File nameX86_microsoft-windows-rastls_31bf3856ad364e35_6.3.9600.17640_none_012c1de76ba0b181.manifest
File versionNot applicable
File size18,718
Date (UTC)23-Jan-2015
Time (UTC)20:48
PlatformNot applicable
Additional files for all supported ARM-based versions of Windows 8.1
File propertyValue
File nameArm_67599292b1220f90c779dec233e201df_31bf3856ad364e35_6.3.9600.17640_none_be2ebb3d8b958738.manifest
File versionNot applicable
File size695
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameArm_840a9ca240aad5e647a59828393f5772_31bf3856ad364e35_6.3.9600.17640_none_296702e91b4f63fb.manifest
File versionNot applicable
File size732
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameArm_bae46b4d2f30034ad42f8003dfd7124d_31bf3856ad364e35_6.3.9600.17640_none_fb4f0b6983c0157d.manifest
File versionNot applicable
File size695
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameArm_c539dc0f31af81d03c08966721f5bb55_31bf3856ad364e35_6.3.9600.17640_none_403ff2cc730fe6c4.manifest
File versionNot applicable
File size694
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameArm_microsoft-windows-e..-protocol-host-peer_31bf3856ad364e35_6.3.9600.17640_none_f8dcef7ddee41865.manifest
File versionNot applicable
File size29,568
Date (UTC)23-Jan-2015
Time (UTC)04:33
PlatformNot applicable
File nameArm_microsoft-windows-eapttls_31bf3856ad364e35_6.3.9600.17640_none_b7df7e47742f3075.manifest
File versionNot applicable
File size17,882
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameArm_microsoft-windows-raschap_31bf3856ad364e35_6.3.9600.17640_none_a788675692c666e0.manifest
File versionNot applicable
File size14,153
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable
File nameArm_microsoft-windows-rastls_31bf3856ad364e35_6.3.9600.17640_none_012e903f6b9dd047.manifest
File versionNot applicable
File size18,718
Date (UTC)23-Jan-2015
Time (UTC)20:41
PlatformNot applicable

↑ Back to the top

Additional steps to let the resolution work

The server must meet the following requirements:
  • A Windows smart card-based strong authentication in enterprise is deployed. See the deployment guidance for Windows smart cards.
  • Extensible Authentication Protocol-Transport Layer Security (EAP-TLS), Protected Extensible Authentication Protocol (PEAP) together with EAP-TLS, or Extensible Authentication Protocol- Tunneled Transport Layer Security (EAP-TTLS) together with EAP-TLS is configured for wireless connectivity authentication.
Additionally, you must enable the SSO feature in Registry Editor.

To do this, follow these steps:

Important
Follow the steps in this section carefully. Serious problems might occur if you modify the registry incorrectly. Before you modify it, back up the registry for restoration in case problems occur.
  1. In Registry Editor, locate and then click the following registry subkey:

    HKEY_CURRENT_USER\Software\Microsoft\Wlansvc\Configuration
  2. Right-click Configuration, click New, and then click DWORD (32-bit) Value.
  3. Name the new registry entry as EnableUsrCertStoring.
  4. Double-click the EnableUsrCertStoring registry entry.
  5. In the Edit DWORD Value dialog box, type 1 in the Value data field, and then click OK.
  6. Exit Registry Editor.
Note You may be unable to access intranet resources through non-domain joined computers if the SSO feature is enabled without setting up the required server topology.

↑ Back to the top

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top

References

See the terminology that Microsoft uses to describe software updates.


↑ Back to the top

Keywords: kbqfe, kbfix, kbsurveynew, kbexpertiseadvanced, kbautohotfix, kbhotfixserver, kb

↑ Back to the top

Article Info
Article ID : 3004544
Revision : 1
Created on : 1/7/2017
Published on : 2/11/2015
Exists online : False
Views : 282