Hi everybody, I just installed and configured FreeRADIUS 2.1.10 successfully. I am using it to authenticate Wifi users. I got trial certificates from GeoTrust, which are supposed to be accepted by windows 7. The thing is, that when I try to connect to to my wifi network a window pops up saying something like (original is german): The server "xx.xx.xx" presented a valid certificate from "GeoTrust Global CA", "GeoTrust Global CA" is however not configured as a valid anchor for the profile. In addition, the server "xx.xx.xx", which is being used to establish the connection, is not configured as a valid NPS server for the profile. (Original message in german) Der Server "xx.xx.xx" stellte ein gültiges, von "GeoTrust Global CA" ausgestelltes Zertifikat dar. "GeoTrust Global CA" ist jedoch nicht als gültiger Vertrauensanker für das Profil konfiguriert. Außerdem ist der Server "xx.xx.xx" für das Profil nicht als gültiger NPS-Server konfiguriert, mit dem Verbindungen hergestellt werden können. (End of original message I click on connect and it works, but I would like, if possible, to make this pop up disappear. Has anyone had this issue and if so know how to make it disappear? Regards, -- Ismael Yáñez A. Systemadministration Rocket Internet GmbH | Johannisstraße 20 | 10117 Berlin | Deutschland mobile: +49 162 290 4698 | mail: ismael.yanez@rocket-internet.de | skype: ismaelrocket www.rocket-internet.de Geschäftsführer: Dr. Johannes Bruder, Arnt Jeschke, Alexander Kudlich Eingetragen beim Amtsgericht Berlin, HRB 109262 USt-ID DE256469659
On 26/07/12 11:17, Ismael Yáñez wrote:
I click on connect and it works, but I would like, if possible, to make this pop up disappear.
Pre-configure the trusted server cert and name under the network profile. You can do this using "netsh" XML profiles, Group Policy, or a tool such as su1x or others.
Has anyone had this issue and if so know how to make it disappear?
It's normal. Windows doesn't know which of the known certs it should accept on a given connection until you tell it. To be clear: the cert *is* built into windows. But you still need to tick the box next to it in the connect properties.
participants (2)
-
Ismael Yáñez -
Phil Mayers