Re: EAP-TLS and Active Directory

On 25-11-15 10:22, Simon Larsson wrote:

I'm trying to implement a 802.1x wireless network which uses EAP-TLS for security reasons. I already have a Windows server with a Certificate Authority, so that's not really an issue. All I have to do there is to create the certificates and then insert them into both the FreeRADIUS server and all the clients.

Here’s my problem. As I understand it, EAP-TLS uses the certificates for authentication and therefor my users credentials become less important (not needed to log in to the network).

Create a unique certificate for every user, and use that certificate for authentication. -- Herwin Weststrate