Computer Certificates

From: "TonyB" <tony.barrett@xxxxxxxxxx>
Date: Fri, 20 Oct 2006 14:05:53 +0100

I've come across this small problem while looking as securing access to our
network using 802.1x/IAS over Ethernet switches. The domain is Win2k3(SP1)
native.

If I'm using computer certificates (not user) as the EAP authentication
method, and the clients don't have RPC access to the local CA to request a
computer cert using the MMC snapin. The clients only have the ability to
request certs through a Web Enrollment Proxy, but you can't seem to request
computer certs through the WEP!

I created a computer authentication template on the CA, and published this,
but the WEP never sees these certs, only user ones.

Any ideas?

.

Follow-Ups:
- Re: Computer Certificates
  - From: TonyB

Prev by Date: Running sysinternals PSPASSWD.exe from local system account
Next by Date: Re: Running sysinternals PSPASSWD.exe from local system account
Previous by thread: Running sysinternals PSPASSWD.exe from local system account
Next by thread: Re: Computer Certificates
Index(es):
- Date
- Thread

Relevant Pages

Re: Computer and User Certificates Issues
... Enrollment of User Certificates using the custom v2 User Certificate Template ... I can NOT request the custom v2 Computer Cert nor the included v1 no ... Concerning permissions, these are the exact permissions I am using now: ...
(microsoft.public.security)
Re: Computer Certificates
... Enrollment website to allow computer certificates to be allocated, ... computer cert using the MMC snapin. ... request certs through a Web Enrollment Proxy, ...
(microsoft.public.win2000.security)