inno-installers/BlueSSOFix

Blue SSO Fix

Automated repair utility for Blue SSO wireless authentication issues on GE Aerospace laptops.

Overview

When Blue SSO wireless authentication fails due to certificate or profile corruption, this tool automates the repair process by:

1. Installing the EAP-PEAP authentication protocol
2. Cleaning expired certificates from the user's certificate store
3. Removing and reinstalling the BLUESSO WiFi profile

Problem Symptoms

• Unable to connect to Blue SSO wireless network
• Authentication failures despite correct credentials
• Certificate errors when connecting
• WiFi profile corruption

What It Does

1. EAP-PEAP Installation

Installs the EAP-PEAP MSI package required for 802.1X wireless authentication.

2. Certificate Cleanup

Removes expired user certificates from:

• Current User certificate store
• Certificates that may be causing authentication conflicts

3. WiFi Profile Reset

• Removes existing BLUESSO WiFi profile
• Reinstalls clean profile from BLUESSO.xml
• Configures proper authentication settings

Files

BlueSSOFix/
├── BlueSSOFix.iss        # Main Inno Setup script
├── EAP-PEAP.msi          # EAP-PEAP protocol installer
├── BLUESSO.xml           # WiFi profile configuration
├── BLUESSO Add.bat       # Profile addition script
├── BLUESSO Add Temp.bat  # Temporary profile script
├── BLUESSO Remove.bat    # Profile removal script
├── gea-logo.ico          # Setup icon
├── patrick.bmp           # Wizard banner
└── patrick-sm.bmp        # Wizard small image

Usage

Interactive Mode

1. Compile BlueSSOFix.iss with Inno Setup
2. Run the generated executable as Administrator
3. Follow the wizard prompts
4. Reconnect to Blue SSO network when complete

Silent Mode

BlueSSOFixSetup.exe /VERYSILENT /SUPPRESSMSGBOXES

Requirements

• Windows 10/11
• Administrator privileges
• Corporate network access (for initial download)

Technical Details

WiFi Profile (BLUESSO.xml)

The profile configures:

• SSID: BLUESSO
• Authentication: WPA2-Enterprise
• Encryption: AES
• EAP Type: PEAP with MSCHAPv2

Certificate Store Locations

Certificates are cleaned from:

Cert:\CurrentUser\My

Batch Scripts

Script	Purpose
BLUESSO Add.bat	Adds profile using netsh wlan add profile
BLUESSO Remove.bat	Removes profile using netsh wlan delete profile
BLUESSO Add Temp.bat	Temporary profile for testing

Troubleshooting

Still can't connect after running fix

1. Restart the computer
2. Forget all saved Blue SSO networks manually
3. Run the fix again
4. Contact IT helpdesk if issue persists

EAP-PEAP installation fails

• Verify you have admin rights
• Check if a conflicting version is installed
• Try manual MSI installation: msiexec /i EAP-PEAP.msi

Certificate errors persist

• Open certmgr.msc and manually check for expired certs
• Look in Personal > Certificates for expired items
• Delete any expired certificates manually

Building

1. Install Inno Setup 6.x
2. Ensure all required files are present
3. Open BlueSSOFix.iss
4. Compile (F9)
5. Output: Output/BlueSSOFixSetup.exe

Author

WJDT / GE Aerospace