topic Client certificate question in Wireless

Client certificate question

octroncisco — Sun, 04 Jul 2021 01:39:19 GMT

Hello,

I am novice with certs and I have a question. I want to implement EAP-TLS in a WPA deployment and I have a question about the client-side certificate.

When I install a client certificate in a machine for a specific user, is this certificate only valid for this machine and this user? Or can I export this certificate and use it in another machine but the same user?

Thanks in advance,

Re: Client certificate question

Scott Fella — Wed, 24 Mar 2010 13:07:56 GMT

Here is a good link that explains the Microsoft certificate requirements.

http://support.microsoft.com/kb/814394

Re: Client certificate question

Robert.N.Barrett_2 — Wed, 24 Mar 2010 16:44:44 GMT

From my experience, you can copy the certificate to another computer (assuming a modern OS). There are two problems with this, though:

1 - You must be able to export the entire certificate, including the private key, to be able to use the certificate on another machine. Most PKI implementations prohibit/disable this.

2 - If you can export the certificate, including the private key, then you are risking the loss of integrity of your PKI. Someone else can get that cert with the private key and impersonate the user.

Re: Client certificate question

octroncisco — Fri, 26 Mar 2010 07:16:03 GMT

Thank you very much, it's a very useful link.

Re: Client certificate question

octroncisco — Fri, 26 Mar 2010 07:16:24 GMT

Thank you very much for the info.