What cert import to Windows Clients
Hello everyone, I have just deploy a Freeradius on CentOS 5.9 Linux machine. I should like use EAP method with TLS so I have genetated the certs. I had just ran bootstrap script from /etc/raddb/certs and it generated many files as follow 01.pem ca.der ca.key ca.pem dh server.crt server.csr server.key server.p12 server.pem What are that files I have import to windows clients machine ? I have installed ca.der on an windows XP but unseccessfull. I can't to connect at the network Wireless. I wonderful any tip about how to generate certs on freeradius and import they to windows machine. thanks
Usuário do Sistema wrote:
I should like use EAP method with TLS so I have genetated the certs. I had just ran bootstrap script from /etc/raddb/certs and it generated many files as follow ... What are that files I have import to windows clients machine ?
Just the ca.der and client certificate.
I have installed ca.der on an windows XP but unseccessfull. I can't to connect at the network Wireless.
Well... there's more to it than that.
I wonderful any tip about how to generate certs on freeradius and import they to windows machine.
Read this: http://deployingradius.com/ It has a detailed set of instructions. Or click on the "documentation" link on www.freeradius.org. There's an EAP-TLS Howto. This is all very well documented. Alan DeKok.
Hi,
01.pem ca.der ca.key ca.pem dh server.crt server.csr server.key server.p12 server.pem
What are that files I have import to windows clients machine ?
for EAP-TLS ? as thats a certificate authentication method you need to generate client certificates....the standard provided script will make client.* files and you'll need the client.der or client.cer file.
I have installed ca.der on an windows XP but unseccessfull. I can't to connect at the network Wireless.
doing what if you only have ca.der installed - and you put it into the correct certificate store as per microsoft docs (or various correct online resources) then you can only be doing PEAP with that windows XP client - so ensure its using a username/password that is known to the RADIUS server alan
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Usuário do Sistema