Re: Using w2k3 IAS / wifi / PEAP / WPA with NT4 domain??

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Sam Salhi [MSFT] (samers_at_online.microsoft.com)
Date: 11/12/04


Date: Fri, 12 Nov 2004 01:23:01 -0800

On your CA, open certificate server snap-in and make sure RAS and IAS
servers template is published (it's not by default)

-- 
      =============================================
  This posting is provided "AS IS" with no warranties, and confers no rights
Join us on Nov 29th 1:00 to 2:00 PM PST, for an online webchat on "Using and 
troubleshooting RADIUS using IAS"
This chat will help you resolve all of your RADIUS/IAS issues. You can ask 
about RADIUS, IAS, 802.1x, Active directory configuration and Certificate 
services, related to IAS and RADIUS
Follow this link to join the chat
http://www.microsoft.com/communities/chats/default.mspx#04_Nov29_IAS_RADIUS
      =============================================
"usenetserver" <sw@sw.com> wrote in message 
news:gYNkd.30297$vy1.5008@fe68.usenetserver.com...
> Thanks Sam.
>
> I did do that, but still no luck. BTW..I did not see an option for those
> certificates...is that an advanced feature? I am still curious about not
> having certificate templates.
>
> "Sam Salhi [MSFT]" <samers@online.microsoft.com> wrote in message
> news:OPANjttxEHA.2572@tk2msftngp13.phx.gbl...
>> On your IAS Server, try to request a certificate from the CA using web
>> enrollment.
>> You will need either a machine certificate or "RAS and IAS server
>> authentication" certificate to be able to authenticate with
>>
>> -- 
>>       =============================================
>>   This posting is provided "AS IS" with no warranties, and confers no
> rights
>>
>> Join us on Nov 29th 1:00 to 2:00 PM PST, for an online webchat on "Using
> and
>> troubleshooting RADIUS using IAS"
>> This chat will help you resolve all of your RADIUS/IAS issues. You can 
>> ask
>> about RADIUS, IAS, 802.1x, Active directory configuration and Certificate
>> services, related to IAS and RADIUS
>> Follow this link to join the chat
>>
> http://www.microsoft.com/communities/chats/default.mspx#04_Nov29_IAS_RADIUS
>>       =============================================
>>
>> "usenetserver" <sw@sw.com> wrote in message
>> news:4d7kd.1102$hf1.361@fe01.usenetserver.com...
>> > Hi all,
>> >
>> > We are trying to use IAS to authenticate against an NT4 domain for 
>> > winxp
>> > laptops . I've added the w2k3 box as a CA. I have created a new remote
>> > access policy and i am able to add windows nt groups, etc., but when I
>> > edit
>> > the profile and select AUTHENTICATION>EAP METHODS>PEAP and try to edit,
> i
>> > get 'A certificate could not be found that can be used with this
>> > Extensible
>> > Authentication Protocol'
>> >
>> > I've scoured newsgroups and have seen things about installing the cert
> for
>> > the local box. I have tried exporting and importing certs, deleting the
>> > boxes own cert from personal store, etc.
>> >
>> > Now I try to request a new certificate on the box (from itself, I am
>> > guessing) and I get 'windows cannot find a valid certificate template
> for
>> > the request.' Opening Certificate Templates, I get 'Windows cannot
>> > retrieve
>> > the list of certificate templates. The computer is not joined to a
> domain.
>> > Certificate templates are not available.'
>> >
>> > The computer is a domain member on my NT domain.
>> >
>> > Any ideas?
>> >
>> >
>> >
>>
>>
>
>
> 


Relevant Pages

  • Re: Does WINDOWS 2003 IAS require Certificate services
    ... For PEAP, a server certificate is required. ... >>> PEAP _requires_ a server certificate on the IAS server. ...
    (microsoft.public.internet.radius)
  • Re: Remote access policy
    ... certificate and server certificate .I want to connect the wireless XP ... There is a Help topic in IAS Help that tells the minimum server cert ... This is correct -- the Help topic is "Network access authentication and ...
    (microsoft.public.internet.radius)
  • Enabling guest wi-fi access w/ IAS & Cisco APs ... ?
    ... user certificates deployed with Certificate Server. ... Enterprise root and subordinate certificate servers, built the IAS ... The problem we are running into is trying to setup the guest access ...
    (microsoft.public.internet.radius)
  • Re: IAS with PEAP and Airespace (now Cisco 1000)
    ... For what it's worth, we also tried using EAP-TLS (I changed the IAS, created ... >> I've gone over our configuration many times, ... > or they do not trust the CA that issued the server certificate to the IAS ...
    (microsoft.public.internet.radius)
  • Re: IAS Certificate Error
    ... >> RADIUS server ... >> I have bought a VERISGN certificate and installed it on the IAS ... click Edit Profile, then Authentication tab, then ...
    (microsoft.public.internet.radius)