NPS and Certificates
I have 1 inquiry that i need to confirm, if i install NPS and ADSC (certificate service) does the NPS server get a certificate automatically ??
the NPS has joined the domain and in the documents i have read that it gets certificate auto. but not sure.
May 15th, 2010 8:17pm
No.
- Is the NPS computer account in a group assigned Read, Enroll, and Autoenroll permissions on the RAS and IAS Server certificate template
- Is the certificate template published at the CA (not done by default)
- Has an autoenrollment GPO been defined to enable autoenrollment of computer certificates
- Is the NPS computer account in an OU where the GPO is applied.
Brian
Free Windows Admin Tool Kit Click here and download it now
May 16th, 2010 4:25pm
Thanks for the reply, am talking about PEAP EAP MS CHAP V2, it requires only server certificate.
When we tested it we just installed the ADCS that's it and did not do anything else and it works fine, thats why i was wondering !!!!
Is there a way for PEAP EAP MS CHAP V2 to work without server certificate ??
is there an option for EAP MS CHAP only (without PEAP) and if its there, does it work without certificate ??
Thanks again for your answer, the above questions are driving me crazy and i just want to confirm :(
\ I have just found this: #Select the appropriate server certificate. The server certificate is typically installed automatically when joining the domain. in this document: http://technet.microsoft.com/en-us/library/dd440996.aspx
May 21st, 2010 1:57pm
Hi,
EAP MS CHAP works without certificate. You need only user name and password.
Free Windows Admin Tool Kit Click here and download it now
June 17th, 2010 7:54pm