Link to home
Start Free TrialLog in
Avatar of InSearchOf
InSearchOfFlag for United States of America

asked on

Windows Security alert when connecting ti wireless network

I am testing my wireless connection after setting up a Radius server with the help of previous EE posts. I am getting this error when I connect to my wireless network:
certificateThe server "...." presented a valid certificate issued by GoDaddy Root Certificate Authority - G2 but not configured as a valid trust anchor for this profile.
Avatar of masnrock
masnrock
Flag of United States of America image

You most likely need to import the certificate to the laptops since trust for GoDaddy certs isn't built in. Here's some links to help you:

https://support.microsoft.com/en-us/kb/2518158

http://superuser.com/questions/116541/what-is-a-valid-trust-anchor-in-windows-7-relating-to-wifi
Avatar of InSearchOf

ASKER

Thanks for the info. The solution calls for adding the CA as a trusted cert to the laptop but there are too many laptops to do this to. These are domain joined laptops. Is there a better way of doing this on a larger scale?
ASKER CERTIFIED SOLUTION
Avatar of masnrock
masnrock
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
OK. Let me try that. Sounds like the way to go. Is better to create another GPO for that instead of messing with the default gpo?
Either way should not be a big deal, however I would probably deal with the default one in your case and just document what was done.
Got it. Do I need to also configure auto enrollment?
That would be a good idea, it would minimize the need for users to interact with anything at all.
Agreed. Let me give it a go. Thanks for the help.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hmmmm. I added the cert and enabled auto enrollment but it did not do anything. When I look at the Public cert tab in my ad profile I do not see the cert nor do I see an auto enrollment tab.
Let's just review.... what exactly did you do in the process of setting everything up?
well I followed the steps in this link:
https://technet.microsoft.com/en-us/library/cc772491(v=ws.11).aspx

I did the steps in Step 1 of the attached doc and then Step 2 of the attached doc. I could not configure a template because I do not have find the certificate template plug when I ran the mmc. I do not have a CA  installed.
Wireless.docx
Try this one. Step 2 is something that you should not have ended up having to look into...

http://www.techrepublic.com/blog/the-enterprise-cloud/provision-an-intermediate-certificate-through-group-policy/
OK. Thanks for the info. Let me try that. If I am still having problems I will scrap it and start over again with win 2012 instead of win 2008