Windows 10 in domain connects but fails to manually reconnect

[Nick Howitt]

I've tried importing it directly into the Machine's Trusted Root 
Certification Store. If I configure 802.1x to use it, I still only get 
the first connection and I'm unable to reconnect if I manually 
disconnect. Openssl verify confirms the certificate is a root CA even if 
Microsoft does not think so.

I am wondering if it is not a certificate issue.

On 09/05/2018 22:35, Nick Howitt wrote:
> On the local machine I double-clicked on the certificate. A popup 
> appeared which says "This CA Root certificate is not trusted. enable 
> trust, install this certificate in the Trusted Root Certification 
> Store", so I clicked on the "Install Certificate ..." button, selected 
> Local Machine then Place all certificates in the following store and 
> selected the Trusted Root Certification Store. Is this incorrect?
>
> If I let the wizard install it automatically, it puts it in the 
> Intermediate Certification Authorities store. This strikes me as odd. 
> I'll have to investigate in the morning, but it was the ca.pem 
> produced from the "make all" command (which I renamed to ca.der) which 
> I was importing.
>
> On 09/05/2018 21:04, Alan Buxey wrote:
>>> as a Trusted Root Certification Authority
>> where? local user? no. needs to be on the local machine as a system 
>> entry.
>>
>> alan
>> -
>> List info/subscribe/unsubscribe? See 
>> http://www.freeradius.org/list/users.html
>
> -
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html