WPA2-Entreprise: which certificate to avoid changing Validate server certificate for Windows guest ?

Stefan Winter stefan.winter at restena.lu
Tue Sep 11 13:59:52 CEST 2018


> I have no definite answer. Loading a file with all the details of the
> connection is how it works for Mac, but I am not sure it can be acheived
> with Windows (in fact, eduroam people have worked on that a bit and I
> don't think they came up with any solution, so I don't think it can be
> done).

For the sake of the mailing list archive: this comment is actively
unhelpful and wrong.


Or ask a search engine of your choice for "Enterprise Wi-Fi onboarding

> Test it is my best advice, then if it works, tell you users that all
> they have to do is to accept the certificate on the first connection.

No. They should be pre-provisioned with the expected certificate and
should never be bothered with the term "certificate" at all, or be
trained to accept strange security warnings.


Stefan Winter

Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20180911/27d00799/attachment.sig>

More information about the Freeradius-Users mailing list