EAP-TLS and Active Directory

[Herwin Weststrate]

On 25-11-15 10:22, Simon Larsson wrote:
> I'm trying to implement a 802.1x wireless network which uses EAP-TLS
> for security reasons. I already have a Windows server with a
> Certificate Authority, so that's not really an issue. All I have to
> do there is to create the certificates and then insert them into both
> the FreeRADIUS server and all the clients.
> 
> Here’s my problem. As I understand it, EAP-TLS uses the certificates
> for authentication and therefor my users credentials become less
> important (not needed to log in to the network).

Create a unique certificate for every user, and use that certificate for
authentication.

-- 
Herwin Weststrate