Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Using the below configuration: internal Domain: company.corp Server 2008 DC and CA

I've setup Radius/NPS for WPA2-Enterprise authentication, but the mobile clients are getting certificate warnings because the PEAP certificate is self signed by the CA.

How can I fix the warning? Do I need to get a signed certificate for the company.corp domain?

share|improve this question
up vote 2 down vote accepted

You'll either need to get a certificate signed by one of the trusted CA's or add your CA's certificated as a trusted root on your mobile clients. The process on how to do this will differ by client.

share|improve this answer
Thanks for the answer. Fyi, I've tried this and trusting certificates on Android is not trivial. It works on iPhone, Blackberry and Windows Mobile fine though. – Null May 3 '10 at 18:48
My question is do I have to obtain a certificate for *.company.corp? And if so what process do I have to follow to resolve the issue? – Null May 3 '10 at 18:50
@Null: no you shouldn't need a wildcard certificate (unless you have other uses for it) Just a certificate for the host that they will be connecting to. – Zypher May 3 '10 at 19:06

Yes, you need to get a PEAP certificate signed by a CA that can be traversed from the mobile device's root certificates.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.