2

Add to trusted root certification authorities?

So I am trying to use Group Policy to configure the wireless settings on a bunch of laptops. We are using a third party cert that isn't showing up as an option in the list of Trusted Root Certification Authorities. This is stopping us from configuring our machines to use certificates to authenticate.

Does anybody know how to add more trusted roots to this list in the Group Policy editor? How does the Protected EAP Properties panel generate this list?

Improve this question
1

1 Answer 1

Reset to default
3

If you simply want to deploy the trusted root certificate, you can do so using group policy:

http://technet.microsoft.com/en-us/library/cc738131(v=ws.10).aspx

You navigate to:

Policy Object Name/Computer Configuration/Windows Settings/Security Settings/Public Key Policies/Trusted Root Certification Authorities

in a GPO that applies to the computers in question and import the third party certificate that you want added to the trusted store.

If you want that same trusted Root Certificate to appear in the list of available certificated when doing the PEAP setup, import it as a trusted certificate on the domain controllers which you are connecting to with GPMC. But it will also most definitely need to be deployed to the clients with the above listed steps before it will be able to be applied to the PEAP properties.

Improve this answer
4
  • importing the cert will add it to the list when I attempt to configure the group policy? I am able to see it in the list if I configure the wireless settings at the client level.
    – MattUebel
    Mar 7, 2012 at 15:45
  • ok, so yes we did import the cert into the GPO, but it is still not showing up as a configurable option in the GPO.
    – MattUebel
    Mar 7, 2012 at 16:00
  • I'm sorry, I misunderstood. Is the certificate imported into the Trusted store on all domain controllers and on the workstation you are running GPMC on?
    – Glenn Sullivan
    Mar 7, 2012 at 16:28
  • Importing the Cert into the Store of the PDC resolved the issue, thanks!
    – MattUebel
    Mar 7, 2012 at 16:41

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .