Solved

How does my NPS certificate work?

Posted on 2015-02-19
4
66 Views
Last Modified: 2015-02-20
Hi,

I've had to pick up a NPS RADIUS configuration since a colleague left.

It's all configured but I'm struggling to understand how it's strung together - mainly for the certificate side of things.

There is a "wireless connection" certificate created which apparently is the certificate needed in order to authenticate to the wireless network. This is set to auto enroll.

The issue is, looking at the config on the NPS server, I cannot see anywhere where it actually states that this is the certificate that should be used. Under the connection policy, I can see it requires authentication via a certificate. I assumed it would be a case of telling the policy which cert to use but all I can see is the CA server listed under the settings.

It's the first time I've dealt with certs which is why I'm struggling really.
I have raised another question about an issue I get with being auto enrolled but that's another topic.

How on earth does the policy know which certificate I should have in order to allow me to connect?

Any help/advice would be welcome.

Thanks
0
Comment
Question by:MFAFC
  • 2
4 Comments
 

Author Comment

by:MFAFC
ID: 40619022
Is it because the certificate simply has "server authentication" as one of it's intended purposes that allows me to connect?
0
 
LVL 20

Accepted Solution

by:
Jakob Digranes earned 250 total points
ID: 40619775
Yes --- you're quite right in your own comment. There is no place in the policy that specify what certificate can be used. You'd need the client authentication (or server authentication) intended purpose. If you have only one certificate, windows will select this - if you have multiple - it will ask you to choose using a dialog box that pops up before authentication
0
 
LVL 29

Assisted Solution

by:Rich Weissler
Rich Weissler earned 250 total points
ID: 40619864
The certificate requirement depends on what is being authenticated.  From Microsoft Technet:
"For example, a certificate used for the authentication of a client to a server must be configured with the Client Authentication purpose. Similarly, a certificate used for the authentication of a server must be configured with the Server Authentication purpose. "
0
 

Author Comment

by:MFAFC
ID: 40620727
Thank you both for taking the time to help.
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Join & Write a Comment

This subject  of securing wireless devices conjures up visions of your PC or mobile phone connecting to the Internet through some hotspot at Starbucks. But it is so much more than that. Let’s look at the facts: devices#sthash.eoFY7dic.
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now