Need sanity check: steps to setting up certificate enrollment for dot1x/PEAP/Active Directory

Ivan Kalik tnt at kalik.net
Thu May 14 08:34:17 CEST 2009


> Is there anyway to automate this procedure in our LAN environment
> other than scenario #2 below?
>

Yes. I have posted this to the list a few days ago. With 2K3 Enterprise
certificates are requested, created (even renewed) and distributed via the
Policy:

http://www.isaserver.org/img/upl/vpnkitbeta2/autoenroll.htm

That article has a good guide for machine autoenrollment. Other guides
tend to concentrate on user autoenrollment.

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list