Computer authentication

[Jeremy Schubert]

On 2013-03-05, at 1:14 PM, David Mitton <david at mitton.com> wrote:

> Quoting Jeremy Schubert <jschubert at shaw.ca>:
> 
>> Is using a device's MAC address the only way to authenticate a  specific machine?
>> -------
>> Jeremy Schubert
>> www.schubertville.com
>> www.schubertschool.com
> 
> No.
> In a Windows Domain, one can use the system's workstation name and a credential created and assigned when the system is "joined" to the domain. ( typically with EAP-MSCHAP inside of PEAP)
> 
> Another technique is to assign unique certificates to the machine, and use EAP-TLS.
> 
> Dave.
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Thanks Dave. Can I give a certificate to a non windows machine as you suggest in your second paragraph?