Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Add to trusted root certification authorities?

So I am trying to use Group Policy to configure the wireless settings on a bunch of laptops. We are using a third party cert that isn't showing up as an option in the list of Trusted Root Certification Authorities. This is stopping us from configuring our machines to use certificates to authenticate.

Does anybody know how to add more trusted roots to this list in the Group Policy editor? How does the Protected EAP Properties panel generate this list?

share|improve this question
    
possible duplicate of In-house Trusted Certificate –  Evan Anderson Mar 7 '12 at 15:01

1 Answer 1

up vote 3 down vote accepted

If you simply want to deploy the trusted root certificate, you can do so using group policy:

http://technet.microsoft.com/en-us/library/cc738131(v=ws.10).aspx

You navigate to:

Policy Object Name/Computer Configuration/Windows Settings/Security Settings/Public Key Policies/Trusted Root Certification Authorities

in a GPO that applies to the computers in question and import the third party certificate that you want added to the trusted store.

If you want that same trusted Root Certificate to appear in the list of available certificated when doing the PEAP setup, import it as a trusted certificate on the domain controllers which you are connecting to with GPMC. But it will also most definitely need to be deployed to the clients with the above listed steps before it will be able to be applied to the PEAP properties.

share|improve this answer
    
importing the cert will add it to the list when I attempt to configure the group policy? I am able to see it in the list if I configure the wireless settings at the client level. –  MattUebel Mar 7 '12 at 15:45
    
ok, so yes we did import the cert into the GPO, but it is still not showing up as a configurable option in the GPO. –  MattUebel Mar 7 '12 at 16:00
    
I'm sorry, I misunderstood. Is the certificate imported into the Trusted store on all domain controllers and on the workstation you are running GPMC on? –  Glenn Sullivan Mar 7 '12 at 16:28
    
Importing the Cert into the Store of the PDC resolved the issue, thanks! –  MattUebel Mar 7 '12 at 16:41

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.