NPS / Radius Certificate Change

[FN-GM]

Hello,

 

The certificate I am using for Radius / NPS is going to expire in 6 months time. I have plenty of time yet, but I want to prepare.

 

When I change the certificate using this method how will the Wireless clients behave please? Will they just continue to work as normal? Or will they boot the client off the wireless as the certificate has been changed?

 

How is the Server Certificate installed on Microsoft Network Policy Server (NPS) on Windows 2008 Server? — Technote Article — Entrust

 

Thanks

[Kiest26]

Assuming the CA which issues the new certificate is trusted by the machines they should just behave as normal.

[ChrisMiles]

I've done this several times with our NPS server. The certificate is only used during authentication so it won't boot people off who are connected and as long as it is trusted on the device it won't cause a problem next time they connect. The only place it will cause an issue is with devices where the certificate is not trusted and the instruction to ignore this problem and connect anyway was given. These devices will again complain about the certificate. Don't be tempted to renew the certificate with the same key, it doesn't get picked up properly.

[FN-GM]

I've done this several times with our NPS server. The certificate is only used during authentication so it won't boot people off who are connected and as long as it is trusted on the device it won't cause a problem next time they connect. The only place it will cause an issue is with devices where the certificate is not trusted and the instruction to ignore this problem and connect anyway was given. These devices will again complain about the certificate. Don't be tempted to renew the certificate with the same key, it doesn't get picked up properly.

 

Thanks. We lush out via group policy so all should be fine.

 

Thanks again