# Blue SSO Fix

Automated repair utility for Blue SSO wireless authentication issues on GE Aerospace laptops.

## Overview

When Blue SSO wireless authentication fails due to certificate or profile corruption, this tool automates the repair process by:

1. Installing the EAP-PEAP authentication protocol
2. Cleaning expired certificates from the user's certificate store
3. Removing and reinstalling the BLUESSO WiFi profile

## Problem Symptoms

- Unable to connect to Blue SSO wireless network
- Authentication failures despite correct credentials
- Certificate errors when connecting
- WiFi profile corruption

## What It Does

### 1. EAP-PEAP Installation
Installs the EAP-PEAP MSI package required for 802.1X wireless authentication.

### 2. Certificate Cleanup
Removes expired user certificates from:
- Current User certificate store
- Certificates that may be causing authentication conflicts

### 3. WiFi Profile Reset
- Removes existing BLUESSO WiFi profile
- Reinstalls clean profile from `BLUESSO.xml`
- Configures proper authentication settings

## Files

```
BlueSSOFix/
├── BlueSSOFix.iss        # Main Inno Setup script
├── EAP-PEAP.msi          # EAP-PEAP protocol installer
├── BLUESSO.xml           # WiFi profile configuration
├── BLUESSO Add.bat       # Profile addition script
├── BLUESSO Add Temp.bat  # Temporary profile script
├── BLUESSO Remove.bat    # Profile removal script
├── gea-logo.ico          # Setup icon
├── patrick.bmp           # Wizard banner
└── patrick-sm.bmp        # Wizard small image
```

## Usage

### Interactive Mode

1. Compile `BlueSSOFix.iss` with Inno Setup
2. Run the generated executable as Administrator
3. Follow the wizard prompts
4. Reconnect to Blue SSO network when complete

### Silent Mode

```batch
BlueSSOFixSetup.exe /VERYSILENT /SUPPRESSMSGBOXES
```

## Requirements

- Windows 10/11
- Administrator privileges
- Corporate network access (for initial download)

## Technical Details

### WiFi Profile (BLUESSO.xml)

The profile configures:
- SSID: BLUESSO
- Authentication: WPA2-Enterprise
- Encryption: AES
- EAP Type: PEAP with MSCHAPv2

### Certificate Store Locations

Certificates are cleaned from:
```
Cert:\CurrentUser\My
```

### Batch Scripts

| Script | Purpose |
|--------|---------|
| `BLUESSO Add.bat` | Adds profile using `netsh wlan add profile` |
| `BLUESSO Remove.bat` | Removes profile using `netsh wlan delete profile` |
| `BLUESSO Add Temp.bat` | Temporary profile for testing |

## Troubleshooting

### Still can't connect after running fix
1. Restart the computer
2. Forget all saved Blue SSO networks manually
3. Run the fix again
4. Contact IT helpdesk if issue persists

### EAP-PEAP installation fails
- Verify you have admin rights
- Check if a conflicting version is installed
- Try manual MSI installation: `msiexec /i EAP-PEAP.msi`

### Certificate errors persist
- Open `certmgr.msc` and manually check for expired certs
- Look in Personal > Certificates for expired items
- Delete any expired certificates manually

## Building

1. Install [Inno Setup 6.x](https://jrsoftware.org/isdl.php)
2. Ensure all required files are present
3. Open `BlueSSOFix.iss`
4. Compile (F9)
5. Output: `Output/BlueSSOFixSetup.exe`

## Author

WJDT / GE Aerospace