EAP-TLS Authentication question

From: Stefan (stefa.suesser_at_no-spam.web.de)
Date: 06/02/04 

Date: Wed, 2 Jun 2004 04:41:12 -0700

Hi NG,

we habe configured our WLAN with IAS and certificates, using EAP-TLS. We strictly followed the Microsoft guide "Securing Wireless LANs", and everything seems to work fine.
I just have some questions, maybe because I do not fully understand what SHOULD go on there.
Is it right that when a computer and user are authenticated, and the user logs off and logs back on again, that only the user gets authenticated again, not the computer?
Is it right that the computer only gets authenticated when the computer starts up?
We had some issues where the user already had received its client authentication certificate, but not the computer. The computer was connected to the LAN via cable. Then we inserted the WLAN card, the user got authenticated and had access to the WLAN - without having a computer certificate. It this how is should be?
In the trace logs on the IAS server and the client, we can see that the computer gets authenticated when it starts up, but not when just a new user logs on to the computer.
I would be very happy if somebody could explain me what the "right" behavior is - many thanks!

Loading