Click here to get back home

PEAP-MS-CHAP v2 Wireless Authentication Certificate

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
PEAP-MS-CHAP v2 Wireless Authentication Certificate Daniel Melameth 01-31-2006
Get Chitika Premium
Posted by Daniel Melameth on January 31, 2006, 4:48 pm
Please log in for more thread options
For simplicity's sake, we are looking at deploying this using a commercial
CA as opposed to an internal CA. Microsoft's literature points to
VeriSign's WLAN Server Certificate, but, to save costs, we are looking for a
"discount" priced WLAN server certificate. Since it appears there are some
special attributes a WLAN server certificate must have over the common "SSL"
certificate, does anyone know of a more competitively priced commercial WLAN
server certificate who's root CA certificate is built into Windows XP?



Posted by S. Pidgorny on February 1, 2006, 5:23 am
Please log in for more thread options
There are no special attributes for IAS certificate - it should be a server
authentication certificate (as any SSL cert). The only significant part is
that you need to chose Microsoft RSA SChannel Cryptographic provider when
enrolling for the cert.
You can use any Dirt Cheap Certs facility, like

http://www.ssl-certificates.com.au/
or
http://www.instantssl.com

You will have to generate CSR with appropriate CSP - I believe you can use
Windows CA Web interface (that scripts xenroll.dll) to generate keys and
save a file for you.

regards


--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

> For simplicity's sake, we are looking at deploying this using a commercial
> CA as opposed to an internal CA. Microsoft's literature points to
> VeriSign's WLAN Server Certificate, but, to save costs, we are looking for
> a
> "discount" priced WLAN server certificate. Since it appears there are
> some
> special attributes a WLAN server certificate must have over the common
> "SSL"
> certificate, does anyone know of a more competitively priced commercial
> WLAN
> server certificate who's root CA certificate is built into Windows XP?
>



Posted by Daniel Melameth on February 1, 2006, 2:26 pm
Please log in for more thread options
Thanks for the prompt reply Svyatoslav. I'll likely give this a spin over
the next couple of weeks and report back with the results.

> There are no special attributes for IAS certificate - it should be a
> server authentication certificate (as any SSL cert). The only significant
> part is that you need to chose Microsoft RSA SChannel Cryptographic
> provider when enrolling for the cert.
> You can use any Dirt Cheap Certs facility, like
>
> http://www.ssl-certificates.com.au/
> or
> http://www.instantssl.com
>
> You will have to generate CSR with appropriate CSP - I believe you can use
> Windows CA Web interface (that scripts xenroll.dll) to generate keys and
> save a file for you.



Similar ThreadsPosted
Re: Certificate-based DHCP authentication November 24, 2005, 4:03 pm
"Server Authentication Certificate" option not available February 21, 2008, 2:27 pm
Certificates for Wireless Networks July 29, 2008, 12:23 pm
wireless logon to domain problem January 9, 2007, 2:04 pm
Wireless Security - External CA Setup March 13, 2007, 2:19 pm
Kerberos machine authentication - apparent authentication failures May 30, 2005, 10:35 am
802.1x Wired & Wireless deployment & software installation February 15, 2006, 4:16 am
Securing Wireless LANs with PEAP and Passwords September 14, 2006, 5:31 am
Is Remote Desktop Connection Login secure over wireless? July 16, 2005, 1:26 pm
HELP! Error /w Wireless Client Connecting to Win2003 Server /w IAS, CA November 12, 2005, 4:31 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap