(SOLVED) XP3 EAP-TLS was Re: HELP! EAP-TLS: how can I install a cert on a workstation so that it works for all users

2009-07-16 Thread john
On Thu, Jul 16, 2009 at 8:12 AM, Nicolas Boullis wrote: > Hi, > > DISCLAIMER: I'm no Windows specialist. > > john wrote: >> >> I am having a hard time figuring out how to make this work. Where/how >> does the cert get imported. Do I need to make a registry change in >> KEY_LOCAL_MACHINE\Software\Mi

Re: HELP! EAP-TLS: how can I install a cert on a workstation so that it works for all users

2009-07-16 Thread Nik Alleyne
Hi Guys, I think this is an excellent tutorial for what he is trying to achieve. http://www.howtoforge.com/wifi-authentication-accounting-with-freeradius-on-centos5 I've used this along with assistance from Ivan and have gotten everything I wanted to work successfully. Nik Quoting Nicolas Boull

Re: HELP! EAP-TLS: how can I install a cert on a workstation so that it works for all users

2009-07-16 Thread Nicolas Boullis
Hi, DISCLAIMER: I'm no Windows specialist. john wrote: > > I am having a hard time figuring out how to make this work. Where/how > does the cert get imported. Do I need to make a registry change in > KEY_LOCAL_MACHINE\Software\Microsoft\EAPOL\Parameters\General\Global > to make this work? I hope

Re: HELP! EAP-TLS: how can I install a cert on a workstation so that it works for all users

2009-07-15 Thread john
Hi John thanks for taking the time to reply, > > Ask the question "Who are you authenticating?" or "What has permission to > use the network?" Am I trying to restrict access to a specific set of users > or am I trying to restrict access to a specific set of machines? If it's the > later does that

Re: HELP! EAP-TLS: how can I install a cert on a workstation so that it works for all users

2009-07-15 Thread John Dennis
On 07/15/2009 01:08 PM, john wrote: So are the following correct?: (1) I can create a single cert for a computer and distribute it to all users who may use that computer (2) I can create a cert for every user and distribute it to every computer that a user logs into. (3) I cannot create a gen

Re: HELP! EAP-TLS: how can I install a cert on a workstation so that it works for all users

2009-07-15 Thread john
> >> (3) I cannot create a generic "computer cert" that authenticates the >> computer and opens the port? > > Yes, you can. But as soon as some user logs onto that computer ... > > Ivan Kalik > Kalik Informatika ISP Thanks for the reply Ivan. I am fine with folks logging in and having access from

Re: HELP! EAP-TLS: how can I install a cert on a workstation so that it works for all users

2009-07-15 Thread Ivan Kalik
> So are the following correct?: > > (1) I can create a single cert for a computer and distribute it to all > users who may use that computer You can give same user certificate to any user using the computer - you can place it on the desktop with installatioon instructions. But don't you hear a vo

Re: HELP! EAP-TLS: how can I install a cert on a workstation so that it works for all users

2009-07-15 Thread john
On Wed, Jul 15, 2009 at 1:52 AM, Ivan Kalik wrote: >> Can I create a client cert for a computer so that any user that logs >> in may use it automatically under Windows XP? I have successfully >> created a client.p12 with the FQDN of the workstation I am using, >> installed it and been authenticated

Re: HELP! EAP-TLS: how can I install a cert on a workstation so that it works for all users

2009-07-15 Thread Ivan Kalik
> Can I create a client cert for a computer so that any user that logs > in may use it automatically under Windows XP? I have successfully > created a client.p12 with the FQDN of the workstation I am using, > installed it and been authenticated by Freeradius. However when I log > in to the computer

HELP! EAP-TLS: how can I install a cert on a workstation so that it works for all users

2009-07-14 Thread john
Hi all, I can't find this information anywhere. I have looked for days. Can I create a client cert for a computer so that any user that logs in may use it automatically under Windows XP? I have successfully created a client.p12 with the FQDN of the workstation I am using, installed it and been au