Re: WM5 PEAP with Certificates

I've got similar issues. We are using PEAP at my workplace and I am not able
to connect to our wireless with my Axim x51v. I've set this up on hundreds
of laptops, but I can't seem to get the PDA to work. For laptops all that is
required to use the wireless is our company certificate since our company
doesn't have certificates from a trusted source, and you also need a login
that is in our wireless access group.

I enrolled our cert into the PDA by just clicking on it. It shows as being
in the trusted root certificate area. When I tried to setup wireless for WPA
using TKIP encryption and then PEAP, if I hit the properties button for PEAP
I would receive an error that I need a personal certificate enrolled. After
some work, I got a personal certificate enrolled (I was able to do that using
Odyssey's software, but I still couldn't get PEAP to work with Odyssey so I
disabled it). Now when I try to connect to the wireless it seems to hang for
a bit, but I never really get connected, and I never get an IP address. I
know that I am at least semi-connecting, because when I use a bad password
with my login info I do see a bad PWD in Active Directory. Anyone have any
help/ideas/suggestions?

"Eric Hicks [MVP]" wrote:

If you don't want to use usernames/password then that's not PEAP that's
EAP/TLS and you do need a user and root cert on the device. Some devices
come with a cert utility (ipaq 5555's, ppc 6700's and a few others). If you
don't want to go that route you will need to export the full cert, root and
all from your xp machine. Then you will need to use pfx import util from
( http://www.jacco2.dds.nl/networking/pfximprt.html ) to import those certs
into your device.

--
--
Eric Hicks [That_Kid] (MS-MVP Mobile Devices)

The MS-MVP Program - http://mvp.support. microsoft.com This posting is
provided "AS IS" with no warranties, and confers no rights...

"Tweezer" <Tweezer@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:65AA8145-5796-4A2E-87A5-1EE3297D4AAF@xxxxxxxxxxxxxxxx
I don't want to use username/password. I want to use Certs. I can do this
with XP easily. WM5 doesn't work though.

"mlai" wrote:

I think PEAP works on encrypting the authentication channel between the
mobile device and the server. The user logs on using his credentials
(username/password) and no certificate is needed. So in essence, the
cert
that you are importing to the device is only for encryption of
communication
between the device and the server (a root cert for the server cert) and
not
a user cert........
"Tweezer" <Tweezer@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F1F515C8-1151-435F-9F5B-60F8CC137273@xxxxxxxxxxxxxxxx
I downloaded a third party tool that allowed me to import pfx files. I
don't
see how this could work without having the user cert if that's what we
plan
to user for authentication. Please elaborate if possible.

Thanks

"Eric Hicks [MVP]" wrote:

Yes this is possible, for PEAP you only need the root certificate
installed
on your device. How are you installing the certificates to your
device?

--
--
Eric Hicks [That_Kid] (MS-MVP Mobile Devices)

The MS-MVP Program - http://mvp.support. microsoft.com This posting is
provided "AS IS" with no warranties, and confers no rights...

"Tweezer" <Tweezer@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CC65BA8A-F477-41E4-853B-497C05E65E1D@xxxxxxxxxxxxxxxx
Is this possible to get working? I have a WM5 device that I managed
to
install a personal and root certificate on, but it won't
authenticate
to
my
WLAN. I'm using IAS server for the auth. I have used the same cert
combo
on
an XP laptop and everything works fine. ANy advice would be
appreciated.



.

Loading