EAP-TLS and getting a new user to log in on a wireless network

I have setup EAP-TLS using AP1232 + ACS + CA + Active Directory + some wireless client machines. Works fine.
My issue is when I have a new user, who has never logged onto the client workstation. I know that if I attach the workstation to a wired network and have the user login, request a cert, issue it, and install it, the wireless will work once I have the wired connection disabled and wireless enabled. However, that kinda defeats the purpose of a WLAN.
How can I get my new users in? After all, getting associated to the AP depends on the user cert, which depends on the ability to get to the network in the first place to request/install a cert.
After further reading and research, I believe that my delima will be fixed by configuring EAP-TLS Machine Authentication. What I'd like to know is whether the CA in this scenario MUST be an Enterprise Root CA or can it be a Standalone CA?
Paras

check the below link and read server requirements.
http://support.microsoft.com/default.aspx?scid=kb;en-us;814394
The stanalone ca needs to be trusted by AD
http://groups.google.co.uk/group/microsoft.public.win2000.security/browse_thread/thread/1cf098c0dfa97ca0/b964dd05c12fd3fb?lnk=st&q=eap-tls+certificates+standalone+root&rnum=2&hl=en#b964dd05c12fd3fb
What windows are you using? The default behaviour of windows is it do user authentication.You would need to play with registry to make systems to do only machine authentication.
You would need connectivity when you want install the ca certificate, or else allow open authentication on the access point to have the connectivity and once the certificates are installed disable it.
Please rate the post if it helps

Similar Messages

The user acct my apple was connected to no longer works (corrupt). My Apple TV is still synced to that account and all of my recent purchases are going to that username. Does anyone know how to get all of the purchased items back and to the new user?

The user profile my appleTV was synced on my computer to no longer works (corrupt). My Apple TV is still synced to that profile and all of my recent purchases are going to that username. Does anyone know how to get all of the purchased items back and to the new user (same computer)? I created a new user on my computer and moved the itunes folder to the desktop but never changed the path to which the apple synced to. Now I can only see old items I purchased before the user profile went bad. PLease help!

Welcome to the Apple Community.
Changing the library the Apple TV is synced with will delete all synced content from the Apple TV, but it won't delete purchased content.
You should be able to change the library, resync any content you want and transfer your purchases back to the new library.

EAP-TLS and MS AD auth problem

Hi,
I have a problem with an ACS to authenticate users with certificate on MS AD.
Working things:
PEAP authentication with the MS AD;
EAP-TLS authentication with the local DB.
Not working things:
EAP-TLS authentication with MS AD.
Because I'm able to auth users with PEAP on MS AD, I guess my config on MS AD is correct.
Because I'm able to auth users with certif in EAP-TLS, I guess my certif config is correct.
So, why it's not working with the combination EAP-TLS and MS AD.
I receive the error 'External DB Account Restriction'
Thanks for your help.

This issue is generally seens when there are multiple domains. Try out this step. Choose Network Connections from the control panel. Right-click the local area connection.Choose Properties. Double-click the TCP/IP option. Choose Advanced at the bottom. Click on DNS at the top. Choose Append these DNS suffixes. Add the FQDN for each domain that ACS authenticates against in the field.

I recently had to send my old iPhone back and get a new one. When I did, I simply did a restore and backup with my computer. When I did that, my iMessage between my iPhone and iPad are no synced,

I recently had to send my old iPhone back and get a new one. When I did, I simply did a restore and backup with my computer. When I did that, my iMessage between my iPhone and iPad are no longer synced. No matter how many times I went to settings, messages and adjusted it, my iPad and iPhone recognize when I send a message out but not when I received a message from another IMessage user to my iPhone. My iPad simply doesn't get those messages. HELP!!!!

If it's corrupt, generally it would be lost.
However, there is third-party software out there that can retrieve some of the data, those of which however I could not recommend as I have never done so myself.
Also, if the old 4S was running a more recent software version than the current 4S, that may cause the issue however usually iTunes tells you exactly that.
Good luck in retrieving that information.

I purchased an iPad mini on October 10th. I want to return it and get the new ipad mini retina when it comes out. How do I do that if the new ipad mini release date isn't until "later in November", which is beyond the 14 days from my purchase date?

I purchased an iPad mini on October 10th. I want to return it and get the new ipad mini retina when it comes out. I am currently still within the 14 day return/exchange window but how can I exchange it if the new ipad mini release date isn't until "later in November", which would be beyond the 14 days from my purchase date? If apple announces a new version of a product you just purchased but won't actually release it for more than 14 days, how can you possibly exchange the one you just bought? Is my only option to return the one I bought on the 10th (so return by 10/24) and then not have an iPad until the new one is available for purchase? Or would it make any sense to return the one I bought, get a new one, which would presumably have another 14 day return window, and then exchange THAT one for the new ipad mini w/ retina when it comes out (hopefully within that second 14 day window)?

Call the apple store you got it from and ask them. Sometimes in the past they've extended the 'no questions asked return' but only Apple can tell you for sure.

I've already restarted my computer and created a new user, but my IPhone 4 still isn't coming out of the "restore" setting; anybody know how?

I've recently tried to restore my IPhone4. For some reason, its not working properly (i.e my phone won't come out of restore). I've already restarted my computer, and created a new user account on my computer.The message that keeps popping up says Error 1604 which i know has somethign to do with the USB port but i don't know what specifically. Any Help??

Error 1604
This error is often related to USB timing. Try changing USB ports, using a different dock connector to USB cable, and other available USB troubleshooting steps (troubleshooting USB connections. If you are using a dock, bypass it and connect directly to the white Apple USB dock connector cable. If the issue persists on a known-good computer, the device may need service.
If the issue is not resolved by USB isolation troubleshooting, and another computer is not available, try these steps to resolve the issue:
Connect the device to iTunes, confirm that the device is in Recovery Mode. If it's not in Recovery Mode, put it into Recovery Mode.
Restore and wait for the error.
When prompted, click OK.
Close and reopen iTunes while the device remains connected.
The device should now be recognized in Recovery Mode again.
Try to restore again.
If the steps above do not resolve the issue, try restoring using a known-good USB cable, computer, and network connection.

I dropped my phone in the water I know it's not covered with the Warranty so what can I do can I trad it in and get a new one and pay some kind of money or do I have too just buy a whole new phone?

I dropped my phone in the water I know it's not covered with the Warranty so what can I do can I trad it in and get a new one and pay some kind of money or do I have too just buy a whole new phone?

The genius bar folks will be glad to help...and if you have backed up your iPhone in iCloud they will restore the backup to the replacement iPhone for you while you wait.
Call or email for an appointment, you don't want to add to your frustration by standing around waiting for someone to get free to help you.

I am going to trade in my iPad 1st gen and get a new iPad Air. What do I need to do to my old iPad to clear all my info out?

I am going to trade in my Ipad 1st Gen and get a new Ipad Air. How do I clear all the info out of my old Ipad?

How to Transfer Everything from an Old iPad to New iPad
http://osxdaily.com/2012/03/16/transfer-old-ipad-to-new-ipad/
iOS: Transferring information from your current iPhone, iPad, or iPod touch to a new device
http://support.apple.com/kb/HT2109
 Cheers, Tom

I heard that you can give back your i pod shuffle and get a new one for free

I heard that you can give back your i pod shuffle and get a new one for free
but how do i do it

Critters222 wrote:
Yes I realize that it was a simple mistake, which is why I checked it out and apologized
no apology needed.

Since upgrading to 11.1 my Itunes freezes in Windows 7 64 bit what can I do to fix this? I have uninstalled and reinstalled and tried a new user account and tried changing my settings

Since upgrading to 11.1 ITunes keeps freezing, I have windows 7 64 bit. I have tried opening in safe mode and creating a new user, I have also uninstalled and reinstalled. What can I do to fix this? Its very frustrating.

Hey pbonnett!
Here is an article that will help you troubleshoot these issues with iTunes on your Windows computer:
iTunes for Windows Vista, Windows 7, or Windows 8: Fix unexpected quits or launch issues
http://support.apple.com/kb/ts1717
Take care, and thanks for visiting the Apple Support Communities.
-Braden

How do you remove and get a new Apple ID on an iPod Touch?

How do I remove and get a new Apple ID on my daughter's iPod Touch instead of my Apple ID that I use for my iPhone? She is now able to get everything that I download and even see some text messages and all my contacts....and she is only 9! I thought it was a secure way to allow her to have this but I've discovered other ways I can monitor her without her having exactly the same music, apps, texts, that I have. Please help!!

No.
Create a new ID for her:
On here iPod go to
- Settings>Messages>Send and receive and sign out your ID and sign into hers. Make sure that only her ID email address is listed.
- Settings>FaceTime sign out of your ID and sign into hers hers. Make sure that under You can be reached at only her ID email address is listed
- Settings>iCloud and sign out and sign in with hers
- Setings>iTunes and App Store and sign out yur ID and sign into hers.
- Apps are locked to the account that purchased them.
- To update apps you have to sign into the account that purchased the apps. If you have apps that need updating purchased from more than one account you have to update them one at a time until the remaining apps were purchased from one account.

My friend gave his Macbook pro to me a month ago but he forgot his password. I want to log him out and creat a new user account of myself.

my friend gave his Macbook pro to me a month ago but he forgot his password. I want to log him out and creat a new user account of myself.

Did your friend also provided you with the original DVDs that came with the MacBook Pro?

TS1538 I have just purchased an iPhone5 and created a new user instead of using my previous ID. How can I access my previous data?

I have just purchased an iPhone5 and created a new user instead of using my iPhone3 ID. How can I access my previous data?

don't just sign out!
if you simply sign out, the stuff you recently purchased will be an issue in the future when an update comes out for apps or anything else. restore the device as new from itunes then restore from a back if you have one as stated above...or set up as new and use correct apple id. this will ensure you will be using the apple id that you used originally without issues from the new one.

Is there any shop in texas ,austin where we can replace an old ipod touch 3G and get a new ipod touch 4G ??

Is there any shop in texas ,austin where we can replace an old ipod touch 3G and get a new ipod touch 4G ??
pls help mee

Sorry but I am pretty sure there isn't a shop which offers such a service.
Apple stores offer a 14 day remorse period where you can return a purchase for a full refund without having to give a reason however this has probably expired - unless you bought from a different store with a similar system which you still happen to be within the time limit for.
Your best bet would be to sell your iPod 3G and put the money towards a new one. If you are having trouble selling it an Apple store will take it and give you 10% off a new iPod.

TS3988 i want to delete my iCloud account and get a new one. but i can not delete as it says that my iphone is being restored. could anyone tell me what would be the solution to my problem. i will be thankful to you..

i want to delete my iCloud account and get a new one. but i can not delete as it says that my iphone is being restored. could anyone tell me what would be the solution to my problem. i will be thankful to you..

You can go to icloud.com, open Mail, click on the gear shaped icon on the upper right and choose preferences, go to the Vacation tab and set up an auto response saying that the account is no longer in use. Then go to Settings>iCloud and turn Mail to Off on your device and stop using the account.
Incoming email to the account will receive your vacation auto response, and eventually the mailbox will fill up and no longer receive mail at all.

EAP-TLS and getting a new user to log in on a wireless network

Similar Messages

Maybe you are looking for