802.1x Wired Auth and Authentication

Hello,

I've posted this same sort of question over in the AD group, but feel my
issue may be better suited here.

I am confused on the Authentication I need to implement (PEAP with MSCHAPv2
or EAP-TLS) for computer authentication. Clients are WXP SP3 and currently I
have EAP-TLS configured and my test user is able to authenticate against my
W2K3 IAS server. Can I use PEAP for computer auth or must it be EAP-TLS?
.

Relevant Pages

  • Re: PEAP-TLS vs EAP-TLS
    ... MSCHAPV2 will not be used and then maybe that would be PEAP-TLS. ... select authentication method there are two choices - secured password ... certificates for both server authentication and client authentication; ... I think this means that there's a PEAP-TLS that's separate from EAP-TLS ...
    (microsoft.public.windows.server.security)
  • Re: PEAP-TLS vs EAP-TLS
    ... EAP-TLS Authentication ... certificate-based security environments. ... remote access authentication, you must use the EAP-TLS authentication ... the TLS secure channel. ...
    (microsoft.public.windows.server.security)
  • Re: PEAP-TLS vs EAP-TLS
    ... The documentation is correct in the order of being most secure though most ... confusing here is that EAP and EAP-TLS are not the same. ... does not allow authentication to be done in clear text. ... Take a look at "Securing Wireless LANs with Certificate Services" ...
    (microsoft.public.windows.server.security)
  • Re: EAP Authentication
    ... If you want to develop a application that performs EAP-TLS authentication, ... > In my test I load the rastls.dll and called the following functions:> * RasEapGetInfo to recover PPP_EAP_INFO structure for the authentication> protocol ... What is the relation between the Ndis driver> protocol and the EAP, ...
    (microsoft.public.internet.radius)
  • RE: 802.1x, Computers, Wired Security
    ... you cannot use PEAP-MS-CHAPv2 for computer authentication because user ... to ensure that client and server certificate requirements for EAP-TLS have ... user credentials. ...
    (microsoft.public.windows.server.active_directory)