Re: EAP TLS not working

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

=?Utf-8?B?RUFSVU4=?= <EARUN@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
news:6AE071A5-A3C0-4925-93DA-86F258E39748@xxxxxxxxxxxxx:

The user's cert does not have correct usage.

This line indicates that the user certificate does not have the correct
purpose in Enhanced Key Usage (EKU) extensions. Ensure that the User
certificate contains the Client Authentication purpose.

See the IAS Help topic "Network access authentication and certificates" for
information on how to configure the cert with the minimum requirements for
use with EAP-TLS. The topic is also on the Web at
http://technet2.microsoft.com/windowsserver/en/library/9d8b61c9-a870-4627-
a8f2-148625fd7fba1033.mspx


--
James McIllece, Microsoft

Please do not send email directly to this alias. This is my online account
name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no rights.
.

Relevant Pages

  • RE: Checkpoint smart defance as IPS
    ... When you obtain a cross signed certificate there is a permanent record. ... authenticated session and the client cert is not given to the gateway. ... equipment for the purpose of monitoring. ... organizations to setup their own RA and illegally fake all the SSL ...
    (Security-Basics)
  • Bug in CertGetCertificateChain() on W2K (SP2) machines
    ... we have install our own W2K CA server root certificate and corresponding ... On W2K and WXP, when a user installs a Root cert, it goes into to the ... The user certificate on WXP is stored by default into the "Other ... ...no problem with the cert install wizard. ...
    (microsoft.public.win2000.security)
  • Re: Retrieving the value types of the values under the key HKEY_LOCAL_MACHINESecurityAppInstallMicro
    ... Our application is signed with privileged Test certificate... ... [certificate given by microsft for ... development purpose, in our program. ...
    (microsoft.public.pocketpc.developer)
  • Re: EAP-TLS with IAS Issue
    ... > to instead use Machine certificates because I don't want my users to ... > be able to export their user certificate to another machine. ... the certificate template setting for "Allow private key to be exported." ...
    (microsoft.public.internet.radius)
  • Re: Where does User Certificate store?
    ... When I first install user certificate, I see it in Certificate MMC ... The cert is in the store you describe, but moving it doesn't move the ...
    (microsoft.public.internet.radius)