Installing Certificates on ACS 3.3 for Windows

[scherea]

We have Microsoft CA and we have installed the certificates on ACS but the certificate dosen't show up in the trust list. Anyone have any ideas? ACS will allow me to turn on PEAP but authentication fails.

[jeremys]

Configuring for PEAP or EAP-TLS can be tricky and there are lots of caveats. This EAP-TLS deployment guide has some info on cert setup that should be equally applicable for PEAP as well.

http://www.cisco.com/en/US/netsol/ns339/ns395/ns176/ns178/networking_solutions_white_paper09186a008009256b.shtml#wp39247

[jafrazie]

Depending on your supplicant, temporarily disable any "validate server cert" checking on your client.

If authentication then starts working, that should point to their being some sort of issue with your server's certificate.

With 3.3, you could do a similar test with the "Generate Self-Signed Certificate" as well.

Hope this helps.