topic Re: EAP-TLS over wireless in Wireless

EAP-TLS over wireless

chris-atkins — Sun, 04 Jul 2021 01:52:42 GMT

Quick question for you EAP experts out there.

I want to be able to deploy EAP-TLS I understand that you need a machine and user certificate, does this mean that i would have to place the cetificate for each user account on that paticular laptop if utilised by more than one menber of staff ?

Thanks in advance.

Chris

Re: EAP-TLS over wireless

andrew.prince — Fri, 11 Jun 2010 17:27:42 GMT

Chris,

EAP-TLS authentication requires computer and user certificates on the wireless client.

HTH>

Re: EAP-TLS over wireless

jhedstr2 — Wed, 16 Jun 2010 12:43:36 GMT

Hi Chris,

If many users share clients, it can be problem that all users certificate have to be on the shared hardware. I had this issue in a school, and we ended up with using EAP-TLS and only hardware certificate. You don’t get full security in this case since you only verify the hardware, but on the other hand, the user have to log in to the domain, so users will be verified as well. Just not by the wireless system.

//Johan

Re: EAP-TLS over wireless

Elliott Shawd — Wed, 16 Jun 2010 17:16:19 GMT

I would setup a new radius login specifically for that client

and configure all accounts on the client to use

the same credentials and cert to logon to the wireless network.

Re: EAP-TLS over wireless

chris-atkins — Thu, 17 Jun 2010 09:03:51 GMT

All makes sense now, thanks everyone.