topic PEAP + self signed certificate in Network Access Control

PEAP + self signed certificate

aalsayed — Sun, 10 Mar 2019 21:38:33 GMT

i have CS ACS SE and i want to run peap for widnows EAP-MSCHAPv2 what is the correct CA in the trusted root certification Authorities list i ahve to choos in windows client

Re: PEAP + self signed certificate

Jagdeep Gambhir — Tue, 27 Jun 2006 13:52:59 GMT

You need to look for a certificate name that was kept at the time to generating self sign cert.

Re: PEAP + self signed certificate

aalsayed — Wed, 28 Jun 2006 08:34:24 GMT

Did that mean i have to copy the certificate whihc i genertaed and install it in eahc client to be shown in the list

or haw i can shaw it in list without installing it

Re: PEAP + self signed certificate

Jagdeep Gambhir — Wed, 28 Jun 2006 11:47:05 GMT

Yes, you need to install the cert on each client. However if you want to avoid installing it on each client then we need to make sure"Validate Server

Certificate" option under PEAP properties on client is UNCHECKED.

Re: PEAP + self signed certificate

viveksantuka — Wed, 05 Jul 2006 04:47:57 GMT

The client needs the root certificate of the CA. Hence if you are using certificates from Verisign or something similar then your client (Windows) already has the root cert.

But if you are using your own Ms. CA then you can push certificates through Active Directory. That way manual installation can be eliminated.

Otherwise either manual installation or unchecking "Validate Server Certificate" are the only options.