Generating a Microsoft compatible CSR for FreeRADIUS

Sallee, Stephen (Jake) Jake.Sallee at
Fri Jan 21 15:52:00 CET 2011


HOLY CRAP! I looked at your documentation (very well done BTW) But NONE of my win 7 stations have ever showed me the accept certificate prompt! NONE!  Please, please tell me how you got it to do that!  I have been searching for exactly that.

Jake Sallee
Godfather Of Bandwidth
Network Engineer

Fone: 254-295-4658
Phax: 254-295-4221

-----Original Message-----
From: at [ at] On Behalf Of John Douglass
Sent: Friday, January 21, 2011 8:45 AM
To: FreeRadius users mailing list
Subject: Re: Generating a Microsoft compatible CSR for FreeRADIUS

I have built some WPA configuration guides as well as some troubleshooting documentation on our build out at:

There is pretty much always some form of cert acceptance for most OS.

- John Douglass, Systems Engineer

Sent from my iPad

On Jan 21, 2011, at 9:33 AM, Phil Mayers <p.mayers at> wrote:

> On 21/01/11 14:10, Sallee, Stephen (Jake) wrote:
>> Has anyone gotten windows clients to work WITHOUT having to do any 
>> manual config on the clients?
> Windows XP with PEAP/MS-CHAPv2 always require some manual config; specifically you need to select PEAP, de-select "automatically use my windows logon name" and (if using a cert from a non-installed CA) install the CA cert.
> Windows 7 (and I think Vista) default to PEAP/MS-CHAPv2 so you can just click on the SSID and type your username/password, then "accept" the CA cert.
> Sadly this wasn't backported into windows XP SP3 IIRC.
> -
> List info/subscribe/unsubscribe? See 

List info/subscribe/unsubscribe? See

More information about the Freeradius-Users mailing list