Configuring Radius server

[Arpitbhargava]

I work for a school and have recently bought smoothwall.

 

Smoothwall has asked me to setup a radius server to send accounting packets for all the laptops which students are bringing to the school.

I am very new to this kind of setup and was looking for some help.

 

So far I have configured NPS on windows 2008. The radius system is registered on AD and have added all the AP's

I am struggling at one point where it is asking to install the certificate. Now we have one of the Domain controller which is acting as certificate authority and has a valid Geotrust certificate, which is again present on raidus server but when i configure "Configure an Authentication Method " it is not allowing me to configure it is saying that the certificate is not present.

 

Can i not use the certificate from my existing domain controller by simply importing it to NPS certificate store?

 

I have attached the screen shot of the error

 

Thanks

Arpit

[derf]

I don't think you can do it like that. You need to generate a certificate signing request on the NPS server, upload the request to the certificate authority signing service, and download the signed certificate, then import that one into NPS (my colleague and I did this a while ago, but he did more than me). This would be for an AD signed certificate so won't be recognised by BYOD devices.

I also seem to remember reading you can't use a wild card cert for radius, but worth double checking on that.