Reporting that the latest Oct 1, 2024 security update broke WPA3-Enterprise connectivity.
When using WPA3-Enterprise, Wifi 6ghz (6e) is no longer accessible, only 2.4 & 5ghz (wifi 6) can be connected to -but not smoothly. Also seamless AP roaming is broken -phone disconnects & then reconnects to the nearest roamed AP. Phone also struggles when initially connecting to WPA3-Enterprise with the Oct 1, 2024 update.
Upto & including the Samsung September 2024 security update, everything on the S24U worked flawlessly.
Nothing has changed in the Wifi / network infrastructure over the past ~6 months.
Note: All of our other Wifi 6e devices (E.G. iPhone, Galaxy S23+, Tabs, Laptops, etc) still connect flawlessly using WPA3-Enterprise EAP-TLS.
The S24U was purchased directly from Samsung Canada. We use WPA3-Enterprise EAP-TLS for all mobile devices. The phone's Wifi worked / connected flawlessly up to & until the Oct 1st update.
Note2: Regarding the Oct 1st update; WPA3-PERSONAL still correctly connects to 6e (2.4, 5, & 6ghz wifi) & AP roams flawlessly.
Tried the following (but no go) -Safe Mode -Forget, reboot, & recreate Wifi connection -Reset all networking/Bluetooth -both with & without reboots between resets. -Backup & then reset phone
I suggest Samsung investigates this issue and provides a security patch to fix this Enterprise security issue.
Clearly Samsung Devs don't fully test these updates before release.
NOTE3: Called Rogers Tech Support and Sr. Engineering identified they test all updates before public release BUT only for their Cellular network.... THEY DO NOT TEST WIFI. Wifi testing is Samsung's responsibility.
After a lengthy discussion on this issue & all the root cause testing / attempted fixes performed for the phone, Rogers Sr. Support agreed that it is the latest Samsung update that is the cause of the problem.
INFO UPDATE: Battery life was significantly reduced by ~30% after this update. However after booting into Safe Mode and then back into Standard Mode, Battery life/drain is back to normal.
I think the upgrade invalidated your enterprise certificate.
Disassociate your device properly (without fully wiping it) from the corporate MDM server.
Remove thr mdm profile. Remove the SG from said affected test user in AD. Ensure replication is comoletw from the mdm server (Intune/Airwatch, etc)whatever is being used.
Wnsure the existing enterprise certificate is removed from the galaxy phone.
Then re-do the setup. Test. I'm personally curious how this works out.
We are sorry to hear that you're experiencing some significant issues with the latest security update on your Samsung Galaxy S24 Ultra, specifically with WPA3-Enterprise connectivity.
We appreciate you for taking time and sharing the detailed descritption of the issue, it will be helpful for us to forward this to our team for review and hopefully it will be fixed in the future updates.
No go on your steps. It's clearly not a client invalidated Wifi certificate.
If you think about it, if the Client Cert was invalidated, the S24U wouldn't connect at all to wifi. The initial auth would be refused by RADIUS. However, in our case, the client DOES pass auth & connects... just not to 6e AND roaming is also broken using WPA3 EAP-TLS.
