Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm trying to connect Windows 7 machine to my wireless network secured with WPA2-Enterprise PEAP. PEAP uses server authentication so I have created root CA named FesbCA on my Windows server 2008 R2 and with it I signed root.fesb.hr certificate which is used for server authentication.

On Windows 7 client machine root CA FesbCA is imported to Trusted Root Certification Authorities and that should make root.fesb.hr valid certificate.

Than why do I still get the certificate error when trying to connect to wireless network?

Here is reference image with error.

share|improve this question
    
Does the NPS server (root) have FesbCA's certificate in its store as well? BTW, I think some are being misled by the names of your servers. Typically, in a PKI the root is the self-signed root CA. In this case, root.fesb.hr is simply a RADIUS box and FesbCA is the root CA correct? –  Paul Ackerman Feb 6 '12 at 13:20
add comment

1 Answer

Export the root certificate from the CA (FesbCA) and import it to the Trusted Root Certification Authority store

share|improve this answer
    
I did that, notice the second paragraph: "On Windows 7 client machine root CA FesbCA is imported to Trusted Root Certification Authorities and that should make root.fesb.hr valid certificate." –  Ivan Maček Jan 9 '12 at 15:15
    
In the current user store or in the computer account store? If you open up the Certificates mmc snap-in for "My Account" and find the root.fesb.hr certificate, and double click it, what does it state under the "Details" tab? Can it locate the chain in its entirety? –  Mathias R. Jessen Jan 9 '12 at 21:02
    
There isn't root.fesb.hr there is only FesbCA My User Account certification store. Certification chain is: FesbCA -> root.fesb.hr. –  Ivan Maček Jan 10 '12 at 0:32
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.