up vote 0 down vote favorite
share [g+] share [fb]

Using the below configuration: internal Domain: company.corp Server 2008 DC and CA

I've setup Radius/NPS for WPA2-Enterprise authentication, but the mobile clients are getting certificate warnings because the PEAP certificate is self signed by the CA.

How can I fix the warning? Do I need to get a signed certificate for the company.corp domain?

link|improve this question
feedback

2 Answers

up vote 2 down vote accepted

You'll either need to get a certificate signed by one of the trusted CA's or add your CA's certificated as a trusted root on your mobile clients. The process on how to do this will differ by client.

link|improve this answer
Thanks for the answer. Fyi, I've tried this and trusting certificates on Android is not trivial. It works on iPhone, Blackberry and Windows Mobile fine though. – Null May 3 '10 at 18:48
My question is do I have to obtain a certificate for *.company.corp? And if so what process do I have to follow to resolve the issue? – Null May 3 '10 at 18:50
@Null: no you shouldn't need a wildcard certificate (unless you have other uses for it) Just a certificate for the host that they will be connecting to. – Zypher♦ May 3 '10 at 19:06
feedback
up vote 0 down vote

Yes, you need to get a PEAP certificate signed by a CA that can be traversed from the mobile device's root certificates.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.