Thanks phil. I recreated whole certificate thing and placed in proper place. Now, it all worked. it was length size, which i reduce 2048 and no problem, if you do not specify with openssl request it uses RSA 4096 length which apple seem to be complaining.

Thanks

On Thu, Nov 7, 2013 at 1:44 PM, Phil Mayers <p.mayers@imperial.ac.uk> wrote:

On 07/11/13 13:30, Khapare Joshi wrote:

any idea on this would be great

Make sure you have the intermediate certificates in "certificate_file" as well.

Make sure that the root certificate is actually present and trusted on the windows client.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html