Windows cannot authenticate with Freeradius

[Alan Buxey]

yep - you can double-click it but you cannot just accept the default
destination - needs to go into the system store (trusted or 3rd party
root CAs) - not into the users
own store.

alan

On 3 September 2017 at 00:09, Matthew Newton
<matthew at newtoncomputing.co.uk> wrote:
> On Sat, Sep 02, 2017 at 01:45:48PM +0200, Matthew Pulis wrote:
>> I transferred ca.pem to the client and double clicked it and hit install.
>> Isn't that how it should be?
>
> Generally, no. You have to do something weird like run mmc, select
> certificate management for the local machine, and import it there.
> Double clicking it IIRC will put it in the wrong place.
>
> But off hand I can't remember exactly which store you should
> import it into. Looks like[0] it's probably the local machine root
> CA store (whereas double clicking it likely puts it in the local
> user root CA store).
>
> --
> Matthew
>
>
> [0] https://github.com/mcnewton/edusetup/blob/master/edusetup.wxs#L47-L54
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html