A Windows XP-based, Windows Vista-based, or Windows Server 2008-based computer does not respond to 802.1X authentication requests for 20 minutes after a failed authentication

Support for Windows Vista Service Pack 1 (SP1) ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 (SP2). For more information, refer to this Microsoft web page: Support is ending for some versions of Windows.

Symptoms

Consider the following scenario:

  • You have a computer that is running Windows Vista, Windows Server 2008, or Windows XP in a networked environment.

  • You enabled 802.1X authentication for a network connection on the computer.

  • The 802.1X authentication fails because of some transient error conditions.

In this scenario, the computer does not respond to any other authentication requests for 20 minutes. Therefore, the computer cannot access the network, or the computer only has limited access to the network.

Cause

This problem occurs because the system enters a blocking period that prevents the network from being overloaded with potentially unsuccessful authentications. During this blocking period, the system does not respond to EAPOL-Identity messages from the network access server (NAP). This blocking period is hardcoded to 20 minutes.

Resolution

After you apply this hotfix, you can set a registry entry to configure the blocking period for failed 802.1X authentications. For more information, see the "Registry information" section.

Hotfix information for Windows Vista and Windows Server 2008

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=supportNote The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this hotfix on a Windows Vista-based computer, you must have Windows Vista Service Pack 1 installed on the computer.
For more information, click the following article number to view the article in the Microsoft Knowledge Base:

935791 How to obtain the latest Windows Vista service pack

No prerequisites are required for Windows Server 2008-based computers.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

Registry information

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756 How to back up and restore the registry in WindowsFor wired networks

To use the new registry setting in a wired network, follow these steps:

  1. Open Registry Editor. To do this, click
    Start, type regedit in the
    Start Search box, and then press ENTER.

  2. Locate and then right-click the following registry subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dot3svc

  3. Point to New, and then click DWORD Value.

  4. Type BlockTime, and then press ENTER.

  5. Right-click BlockTime, and then click
    Modify.

  6. Click Decimal under
    Base.

  7. In the Value data box, type an appropriate value for the blocking period, and then click OK. The value that you specify for this registry entry represents the number of minutes that the system waits before it retries a failed authentication. The default value is 20 and the valid range is 1 - 60. If you set this key to 0, it will not apply at all.

  8. Exit Registry Editor.

For wireless networks

Note Windows XP SP3 is only affected when you are using Wired 802.1X authentication. It is not affected when you are using Wireless networks.

To use the new registry setting in a wireless network, follow these steps:

  1. Open Registry Editor. To do this, click
    Start, type regedit in the
    Start Search box, and then press ENTER.

  2. Locate and then right-click the following registry subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\wlansvc

  3. Point to New, and then click DWORD Value.

  4. Type BlockTime, and then press ENTER.

  5. Right-click BlockTime, and then click
    Modify.

  6. Click Decimal under
    Base.

  7. In the Value data box, type an appropriate value for the blocking period, and then click OK. The value that you specify for this registry entry represents the number of minutes that the system waits before it retries a failed authentication. The default value is 20 and the valid range is 1 - 60. If you set this key to 0, it will not apply at all.

  8. Exit Registry Editor.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows Vista and Windows Server 2008 file information notes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.

    Version

    Product

    Milestone

    Service branch

    6.0.6001.22xxx

    Windows Vista SP1 and Windows Server 2008 SP1

    SP1

    LDR

  • Service Pack 1 is integrated into Windows Server 2008.

  • The .manifest files and the .mum files that are installed in each environment are listed separately in the "Additional file information for Windows Server 2008 and for Windows Vista" section. These files and their associated .cat (security catalog) files are critical to maintaining the state of the updated component. The .cat files are signed with a Microsoft digital signature. The attributes of these security files are not listed.

For all supported 32-bit versions of Windows Server 2008 and of Windows Vista

File name

File version

File size

Date

Time

Platform

Dot3.mof

Not Applicable

6,072

18-Dec-2007

21:01

Not Applicable

Dot3.tmf

Not Applicable

290,156

20-Sep-2008

01:43

Not Applicable

Dot3api.dll

6.0.6001.22271

45,056

20-Sep-2008

04:00

x86

Dot3dlg.dll

6.0.6001.22271

45,568

20-Sep-2008

04:00

x86

Dot3msm.dll

6.0.6001.22271

74,752

20-Sep-2008

04:00

x86

Dot3svc.dll

6.0.6001.22271

175,616

20-Sep-2008

04:00

x86

Dot3ui.dll

6.0.6001.22271

142,848

20-Sep-2008

04:00

x86

Gatherwiredinfo.vbs

Not Applicable

12,198

18-Dec-2007

21:01

Not Applicable

Gatherwiredinfo.xslt

Not Applicable

743

18-Dec-2007

21:01

Not Applicable

Lan diagnostics.xml

Not Applicable

48,186

18-Dec-2007

21:01

Not Applicable

Report.system.netdiagframework.xml

Not Applicable

29,356

18-Dec-2007

21:01

Not Applicable

Report.system.wired.xml

Not Applicable

19,290

18-Dec-2007

21:01

Not Applicable

Rules.system.netdiagframework.xml

Not Applicable

57,286

18-Dec-2007

21:01

Not Applicable

Rules.system.wired.xml

Not Applicable

43,808

18-Dec-2007

21:01

Not Applicable

Gatherwirelessinfo.vbs

Not Applicable

15,181

18-Dec-2007

21:24

Not Applicable

Gatherwirelessinfo.xslt

Not Applicable

933

18-Dec-2007

21:24

Not Applicable

Report.system.wireless.xml

Not Applicable

59,620

18-Dec-2007

21:24

Not Applicable

Rules.system.wireless.xml

Not Applicable

164,452

18-Dec-2007

21:24

Not Applicable

Wireless diagnostics.xml

Not Applicable

33,857

18-Dec-2007

21:24

Not Applicable

Wlan.mof

Not Applicable

12,880

18-Dec-2007

21:24

Not Applicable

Wlan.tmf

Not Applicable

1,675,370

20-Sep-2008

01:43

Not Applicable

Wlanapi.dll

6.0.6001.22271

64,512

20-Sep-2008

04:00

x86

Wlanhlp.dll

6.0.6001.22271

68,096

20-Sep-2008

04:00

x86

Wlanmsm.dll

6.0.6001.22271

293,376

20-Sep-2008

04:00

x86

Wlansec.dll

6.0.6001.22271

302,592

20-Sep-2008

04:00

x86

Wlansvc.dll

6.0.6001.22271

514,048

20-Sep-2008

04:00

x86

For all supported 64-bit versions of Windows Server 2008 and of Windows Vista

File name

File version

File size

Date

Time

Platform

Dot3.mof

Not Applicable

6,072

18-Dec-2007

21:01

Not Applicable

Dot3.tmf

Not Applicable

309,355

20-Sep-2008

02:14

Not Applicable

Dot3api.dll

6.0.6001.22271

59,904

20-Sep-2008

04:19

x64

Dot3dlg.dll

6.0.6001.22271

55,296

20-Sep-2008

04:19

x64

Dot3msm.dll

6.0.6001.22271

92,160

20-Sep-2008

04:19

x64

Dot3svc.dll

6.0.6001.22271

208,896

20-Sep-2008

04:19

x64

Dot3ui.dll

6.0.6001.22271

154,624

20-Sep-2008

04:19

x64

Gatherwiredinfo.vbs

Not Applicable

12,198

18-Dec-2007

21:01

Not Applicable

Gatherwiredinfo.xslt

Not Applicable

743

18-Dec-2007

21:01

Not Applicable

Lan diagnostics.xml

Not Applicable

48,186

18-Dec-2007

21:01

Not Applicable

Report.system.netdiagframework.xml

Not Applicable

29,356

18-Dec-2007

21:01

Not Applicable

Report.system.wired.xml

Not Applicable

19,290

18-Dec-2007

21:01

Not Applicable

Rules.system.netdiagframework.xml

Not Applicable

57,286

18-Dec-2007

21:01

Not Applicable

Rules.system.wired.xml

Not Applicable

43,808

18-Dec-2007

21:01

Not Applicable

Gatherwirelessinfo.vbs

Not Applicable

15,181

18-Dec-2007

21:24

Not Applicable

Gatherwirelessinfo.xslt

Not Applicable

933

18-Dec-2007

21:24

Not Applicable

Report.system.wireless.xml

Not Applicable

59,620

18-Dec-2007

21:24

Not Applicable

Rules.system.wireless.xml

Not Applicable

164,452

18-Dec-2007

21:24

Not Applicable

Wireless diagnostics.xml

Not Applicable

33,857

18-Dec-2007

21:24

Not Applicable

Wlan.mof

Not Applicable

12,880

18-Dec-2007

21:24

Not Applicable

Wlan.tmf

Not Applicable

1,747,635

20-Sep-2008

02:14

Not Applicable

Wlanapi.dll

6.0.6001.22271

86,528

20-Sep-2008

04:19

x64

Wlanhlp.dll

6.0.6001.22271

97,792

20-Sep-2008

04:19

x64

Wlanmsm.dll

6.0.6001.22271

353,792

20-Sep-2008

04:19

x64

Wlansec.dll

6.0.6001.22271

376,320

20-Sep-2008

04:19

x64

Wlansvc.dll

6.0.6001.22271

616,448

20-Sep-2008

04:19

x64

Dot3.mof

Not Applicable

6,072

18-Dec-2007

21:01

Not Applicable

Dot3api.dll

6.0.6001.22271

45,056

20-Sep-2008

04:00

x86

Dot3dlg.dll

6.0.6001.22271

45,568

20-Sep-2008

04:00

x86

Dot3msm.dll

6.0.6001.22271

74,752

20-Sep-2008

04:00

x86

Dot3ui.dll

6.0.6001.22271

142,848

20-Sep-2008

04:00

x86

Wlan.mof

Not Applicable

12,880

18-Dec-2007

21:24

Not Applicable

Wlanapi.dll

6.0.6001.22271

64,512

20-Sep-2008

04:00

x86

Wlanhlp.dll

6.0.6001.22271

68,096

20-Sep-2008

04:00

x86

Wlanmsm.dll

6.0.6001.22271

293,376

20-Sep-2008

04:00

x86

Wlansec.dll

6.0.6001.22271

302,592

20-Sep-2008

04:00

x86

Hotfix information for Windows XP

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=supportNote The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this hotfix, Windows XP SP3 must be installed on the computer.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

File information

File name

File version

File size

Date

Time

Platform

SP requirement

Service branch

Dot3svc.dll

5.1.2600.5745

132,096

20-Jan-2009

15:14

x86

SP3

SP3QFE

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Workaround

If you are using a wired connection for networking, this problem is temporarily resolved after you disconnect and then reconnect the network cable.

More Information

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

Additional file information for Windows Server 2008 and for Windows Vista

Additional files for all supported 32-bit versions of Windows Server 2008 and of Windows Vista

File name

Package_1_for_kb957931~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,925

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Package_2_for_kb957931~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,942

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Package_3_for_kb957931~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,780

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Package_4_for_kb957931~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,766

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Package_for_kb957931_client_1~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,803

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Package_for_kb957931_client~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,430

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Package_for_kb957931_server_0~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,905

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Package_for_kb957931_server~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,431

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

X86_7aa1285edaea08cca8617dd24c1b9a15_31bf3856ad364e35_6.0.6001.22271_none_5566aa6c7dc05eea.manifest

File version

Not Applicable

File size

695

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

X86_991a07543684aa8ce7a9e86079cb8579_31bf3856ad364e35_6.0.6001.22271_none_ab8792bcec08b285.manifest

File version

Not Applicable

File size

695

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

X86_microsoft-windows-dot3svc_31bf3856ad364e35_6.0.6001.22271_none_6baafe4f8cd9c5d9.manifest

File version

Not Applicable

File size

60,849

Date (UTC)

20-Sep-2008

Time (UTC)

04:40

Platform

Not Applicable

File name

X86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.22271_none_9c8331da1e3b9b17.manifest

File version

Not Applicable

File size

76,282

Date (UTC)

20-Sep-2008

Time (UTC)

04:38

Platform

Not Applicable

Additional files for all supported 64-bit versions of Windows Server 2008 and of Windows Vista

File name

Amd64_4c6c2a571130db66e4888bedd050050b_31bf3856ad364e35_6.0.6001.22271_none_0e86157f9e43bc00.manifest

File version

Not Applicable

File size

1,040

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Amd64_6cfbfbc161facfaf45f3b07726231f98_31bf3856ad364e35_6.0.6001.22271_none_602c751a582b7c32.manifest

File version

Not Applicable

File size

1,040

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Amd64_microsoft-windows-dot3svc_31bf3856ad364e35_6.0.6001.22271_none_c7c999d34537370f.manifest

File version

Not Applicable

File size

60,909

Date (UTC)

20-Sep-2008

Time (UTC)

04:54

Platform

Not Applicable

File name

Amd64_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.22271_none_f8a1cd5dd6990c4d.manifest

File version

Not Applicable

File size

76,352

Date (UTC)

20-Sep-2008

Time (UTC)

04:52

Platform

Not Applicable

File name

Package_1_for_kb957931~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

2,152

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Package_2_for_kb957931~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

2,169

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Package_3_for_kb957931~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

2,005

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Package_4_for_kb957931~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

1,991

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Package_for_kb957931_client_1~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

1,815

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Package_for_kb957931_client~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

1,438

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Package_for_kb957931_server_0~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

1,917

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Package_for_kb957931_server~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

1,439

Date (UTC)

22-Sep-2008

Time (UTC)

18:44

Platform

Not Applicable

File name

Wow64_microsoft-windows-dot3svc_31bf3856ad364e35_6.0.6001.22271_none_d21e44257997f90a.manifest

File version

Not Applicable

File size

47,457

Date (UTC)

20-Sep-2008

Time (UTC)

04:28

Platform

Not Applicable

File name

Wow64_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.22271_none_02f677b00af9ce48.manifest

File version

Not Applicable

File size

66,190

Date (UTC)

20-Sep-2008

Time (UTC)

04:28

Platform

Not Applicable

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

Thank you for your feedback!

×