|
Home > Archive > Radius Server > February 2005 > Win2k3 IAS Certificate
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Win2k3 IAS Certificate
|
|
|
| I am testing a WLAN deployment in a Win2k A/D domain. The IAS server is
running Win2k3, and clients will be Win2k, WinXP and PPC2003.
I am planning to use 802.1x auth with PEAP-MSCHAPv2 through HP 420 AP's,
so clients can authenticate via user/password logon, with only the IAS
server requiring a cert. Question is, in Win2k3 A/D there are many more
certificate templates than in Win2k, and I'm not sure which certificate
to request for the Win2k3 IAS server from the Win2k CA. I should be ok
installing it, if I can get the correct certificate type with the
necessary EKU extensions.
I'd rather the certificate be issued internally than 'buy one in'.
Can anyone assist?
| |
| James McIllece [MS] 2005-02-02, 5:55 pm |
| TonyB <tony.barrett@roke.co.uk> wrote in
news:ey3YSATCFHA.3740@TK2MSFTNGP09.phx.gbl:
> I am testing a WLAN deployment in a Win2k A/D domain. The IAS server is
> running Win2k3, and clients will be Win2k, WinXP and PPC2003.
>
> I am planning to use 802.1x auth with PEAP-MSCHAPv2 through HP 420 AP's,
> so clients can authenticate via user/password logon, with only the IAS
> server requiring a cert. Question is, in Win2k3 A/D there are many more
> certificate templates than in Win2k, and I'm not sure which certificate
> to request for the Win2k3 IAS server from the Win2k CA. I should be ok
> installing it, if I can get the correct certificate type with the
> necessary EKU extensions.
>
> I'd rather the certificate be issued internally than 'buy one in'.
>
> Can anyone assist?
>
Please see the following Help topic, which contains a table that helps you
choose which certificate template to use based on the application:
"Network access authentication and certificates" in Windows Server 2003
IAS or VPN Help, or on the web at
http://www.microsoft.com/resources/.../2003/standard/
proddocs/en-
us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/prodd
ocs/en-us/sag_VPN_und15.asp.
--
James McIllece, Microsoft
Please do not send email directly to this alias. This is my online account
name for newsgroup participation only.
This posting is provided "AS IS" with no warranties, and confers no rights.
|
|
|
|
|