Hi,
it's an issue with your cert not having all the correct attributes, update to the newest version of freeradius and read the eap documentation. I've gone thru the same frustration, blame Microsoft.
no. if it worked with XP then the certs are fine - the server needs to be upgraded to support Vista. from the changelog: FreeRADIUS 1.1.4 ; Date: 2007/01/14 00:37:15 , urgency=medium Feature improvements * Major enhancements to rlm_pap, that make "encryption_scheme" a thing of the past. See "man rlm_pap" for details. * Added SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS flag to use work-arounds that enable Windows Vista clients to work. * Added preliminary code to support Firebird. (closes: #378) Use at your own risk! * Send MS-CHAP2-Success, which makes EAP-TTLS/MSCHAP work on more platforms. (closes: #402) * Add a new "reply-name" directive in rlm_sqlcounter to define the name of the reply attribute. (closes: #403) * Added more dictionaries and attributes (closes: #408, among others) * Print ntlm_auth failure reason in Module-Failure-Message (closes: #398) * radsqlrelay is able to get the DB password from a file instead of command line. (closes: #395) note item 2 and 4. alan