WM5 and 802.1X

WM5 and 802.1X

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
WM5 and 802.1X Randy Smith 05-28-2008
Posted by Randy Smith on May 28, 2008, 11:30 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello,

I have a private CA used for WLAN authentication. My network has the
following:

a.. There is an existing Wireless infrastructure with several access points.
a.. A Windows PKI infrastructure is already in place.
a.. The certificate Authority does not use standard templates.
a.. XP Notebooks are already running on WEP, EAP-TLS for authentication to
the Wireless network.
a.. They enroll the certificates through Windows group policy.
a.. Microsoft's IAS is used for the Radius authentication, and is connected
to the AD with the user accounts.

Along with our Windows XP and 2000 systems we have several Windows Mobile 5
barcode scanners. I'd like to get these devices using the 802.1x WLAN
security. I understand that I will have to manually install the certificate
using a third party installer.

What are some examples of good third party installers for this step?

I would like AD to use a machine or computer certificate to authenticate a
barcode scanner. Is this possible?

If I must use personal certificates and authenticate to AD via the RADIUS
server what is the best way to setup the user accounts? Several users will
be using the barcode scanners and I do not want to assign scanners to
users...they will just grab one from a pool that is available.

I do want to be able to track connections and network changes back to a
particular device/user. What is a good way to accomplish this?

If anyone has any documentation or web links that could help with any of
these questions it would be a huge help. Thanks in advance!


Randy



Posted by S. Pidgorny on May 30, 2008, 5:28 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I used this one:

http://www.jacco2.dds.nl/networking/p12imprt.html


--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *


> Hello,
>
> I have a private CA used for WLAN authentication. My network has the
> following:
>
> a.. There is an existing Wireless infrastructure with several access
> points.
> a.. A Windows PKI infrastructure is already in place.
> a.. The certificate Authority does not use standard templates.
> a.. XP Notebooks are already running on WEP, EAP-TLS for authentication to
> the Wireless network.
> a.. They enroll the certificates through Windows group policy.
> a.. Microsoft's IAS is used for the Radius authentication, and is
> connected to the AD with the user accounts.
>
> Along with our Windows XP and 2000 systems we have several Windows Mobile
> 5 barcode scanners. I'd like to get these devices using the 802.1x WLAN
> security. I understand that I will have to manually install the
> certificate using a third party installer.
>
> What are some examples of good third party installers for this step?
>
> I would like AD to use a machine or computer certificate to authenticate a
> barcode scanner. Is this possible?
>
> If I must use personal certificates and authenticate to AD via the RADIUS
> server what is the best way to setup the user accounts? Several users
> will be using the barcode scanners and I do not want to assign scanners to
> users...they will just grab one from a pool that is available.
>
> I do want to be able to track connections and network changes back to a
> particular device/user. What is a good way to accomplish this?
>
> If anyone has any documentation or web links that could help with any of
> these questions it would be a huge help. Thanks in advance!
>
>
> Randy
>




The site map in XML format XML site map

Contact Us | Privacy Policy