Ivan, After setting up FR successfully for wireless access/auth using WPA2-EAP_PEAP using the certs generated by ./bootstrap I decided to generate my own as detailed in CA the documentation. I created a CAs for Redhat(.pem) and WindowsXP clients (.der) substituting my company information in the appropriate places of the CA.cnf. For some unknown reason my self certs failed to work in either client. After trying this twice and have both attempts fail I regenerated the original CAs for example using ./bootstrap, the old CA.cnf file - they both worked for my clients (Linux/WinXP) Suggestions on debugging this process. Steven -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.