PEAP authentication failure

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Dave Robinson (drobinson_at_endtoend.com)
Date: 02/18/04 

Date: 18 Feb 2004 07:51:48 -0800

Hi all,

I'm using Win2K's IAS with SP4 and a WinXP client and trying to
authenticate over with my wireless card over an AMP Interconnect AP.

I've installed Certificate Services on my IAS box - it's a DMZ server
and is NOT part of a domain. I've got the Server Authentication cert
installed in the local machine store and IAS is seeing the cert. I've
set the store password in reversible encryption set, and I'm trying to
use EAP-MSCHAP V2.

On the client-side I've got the CA's cert install in the trusted root
store. I've got the CA cert selected under the EAP properties for the
connection, and I'm not sure what to select for my WEP keys. I've
tried selecting 'The key is provided for my automatically' and I've
tried statically inputing my WEP keys.

I'm getting an authentication failure because of bad username or
password in the event logs. I've tried deleting and recreating user
accounts but still the same error. Any idea why?

Relevant Pages

  • Re: Authenticate Computer account using PEAP MS-CHAPv2 on IAS 2k
    ... using a test root CA. IAS has a valid cert from the ... and clients have the root CA cert installed in the Local Computer Trusted ... authentication. ...
    (microsoft.public.internet.radius)
  • Re: IAS installation
    ... using the local IAS or suitably send requests to ... a remote IAS server ("RADIUS authentication"). ... > Must the server where i install IAS be a member of the domain? ...
    (microsoft.public.internet.radius)
  • Re: Building IAS
    ... > The server is a Windows 2003 Server, ... The best info is right on your machine -- just install IAS (Windows ... Internet Authentication Service ...
    (microsoft.public.internet.radius)
  • Re: Mobile 2003 Radius authentication requirements
    ... > So where does the cert com from "using TLS"? ... I implemented 802.1x RADIUS> authentication on my domain and did not have a CA installed. ... So you are saying that IAS creates its own> Certificate ...
    (microsoft.public.internet.radius)
  • Remote access policy and certificate problem
    ... W2K3 server, W2K3 AD native mode. ... Cert server available as enterprise root. ... the certs from the server running IAS, ... be found that can be used with this extensible authentication protocol. ...
    (microsoft.public.internet.radius)