The Microsoft patch KB5127648 causes WPA2-Enterprise (EAP-PEAP) authentication to stop working
Yesterday, Aranya noted a discussion in an online forum regarding a new Windows patch released by Microsoft. The patch in question is KB5127648, and based on the information we’ve seen in Microsoft’s discussion forums, this patch disables NTLM v1 SSO. The phase-out of NTLM v1 is something Microsoft has communicated previously, including in the support article linked at the bottom.
As a result, authentication methods that rely on this version of NTLM will stop working, and, for example, clients attempting to authenticate to a wireless network will be unable to connect.
We at Aranya would therefore like to bring this potential issue with KB5127648 to our customers’ attention and urge them to thoroughly test this specific patch before rolling it out on a large scale.
The forum post containing information about this is:
In addition, this support article contains information on how to resolve the issue:
If you need help with this, please feel free to contact us here.
About the Author
Jonas Hammarbäck – Network Architect at Aranya
Jonas Hammarbäck is a network architect at Aranya with extensive experience in networking and IT security. He has in-depth expertise in HPE Aruba Networking, network authentication, and ClearPass, and regularly shares his technical knowledge both at Aranya and in the HPE Networking Airheads community.
