Securing WiFi, use certificates or something else?

60 users all with iPhones, 20 of those users are Win 8.1 laptop users. AD at 2012R2 level. We currently have 3APs and use WPA2PSK to secure them. the laptops are all get their WiFi profiles from AirWatch. The iPhones are manual. My goal is not to have to tell the users the psk. plus if a user leaves they'll still have access to the hotspot.
I'm considering setting up Certificates to replace the psk. I'd rather try and setup Radius but am not sure I can setup Radius without certs.
If I must setup CS, I know there are two ways to setup certificate services. Stand alone and Enterprise. I'm unsure which way is best for my situation.
Any input is much appreciated.
This topic first appeared in the Spiceworks Community

Hi,
Sure, I am not a developer to get with you deeper, but Flash
can connect to your database, you can get more info throught the
develper center in this site or google about connecting to SQL
database using Flash.
Also, you can use flex which provide a Flash-based interface
with connecting to your database thought Macromedia develped lang
called MXML.
Hoep this helps

Similar Messages

Secure PDF using certificate

Hi All,
I'm developing a secure PDF using certificate.
When I open the PDF I get acrobat security saying " A digital ID was used to encrypt this document but no digital ID is present to decrypt it.Make sure your digital ID is properly installed or contact the document author. "
Any help in resolving this issue is appreciated?

I have the exact same problem with the following exception:
I encrypted a portfolio with a public key for a committee, including myself, using our public keys to allow just us to be able to open the portfolio. This worked as it should with Acrobat 9.4.1 and Reader 9.4.1.
When I updated to Adobe Reader X, I got the infamous
"Acrobat Security
A digital ID was used to encrypt this document but no digital ID is present to decrypt it. Make sure your digital ID is properly installed or contact the document author" message.
On this same computer I can open the portfolio with Acrobat 9.4.1 and it doesn't prompt me for a password. When I open the same portfolio with Adobe Reader X, it asks for the password and gives the message.
When I upgraded to Reader X, I completely removed Reader 9 prior to loading Reader X. After a successful upgrade, I set my preferences to match what I had with Reader 9. Next, I re-established my security settings as follows:
1) Edit>Protection>Security Settings - then set the same private key as before, and
2) Edit>Protection>Manage Trusted Identities - then set the same public keys as before.
It should have worked, right?

IPad - All new.. But the " +" sign is missing in calandar.. Im not using iCloud or something else.. What to do then??

iPad - All new.. But the " +" sign is missing in calandar.. Im not using iCloud or something else.. What to do then??

Go to Settings>iCloud>Calendar>On. Toggle the setting on and off. You don't have to use iCloud, so just turn the setting off if you don't want to use iCloud.
Turning the calendar on in the iCloud settings usually sets the + to appear again.

So do you use pacman or something else like pacman-color/yaourt/tupac

I'm very sorry if this is not the place for such topic
Do you use the original pacman or modifications like pacman-color/yaourt/tupac/something-else?
I personally use pacman, thinking of trying yaourt maybe.

I only use pacman. In the past I've experimented with yaourt but never really liked it. I also tried powerpill but found that it was not useful often enough to keep around, because most of my pacman downloads are tiny.
EDIT: I'm such a flip-flop. I am now using both yaourt and powerpill again, in combination with a custom script found here.
Last edited by fflarex (2009-02-24 16:07:42)

Secure wifi using another wifi.

When travelling, I usually hook my airport express to the hotels internet via cable, in order to create my own secure wireless network. Now I was wondering how I can do the same thing except for hotels that only have wifi, no cable?

Are my devises safe?
Not as safe as they should be.
You are running the AirPort Express in "Bridge Mode", so all of your devices are on the same network as the hotel. That's why you can "see" other devices, and they can "see" you.
If you run the AirPort Express in a Router Mode of DHCP and NAT, you will not be able to "see" any other devices...and they will not be able to "see" you....so your network is isolated and much more secure.
AirPort Utility will display a Double NAT message when you set things up this way, and the light on the Express will blink amber. You can click to "ignore" the Double NAT and the light will run green.

How can l get audio only from my Apple TV 3 to output through Iphone 5 using Airplay or something else so l can watch my Apple TV and listen to it through my iphine headphones without waking the family at night

I am wanting to remotely listen to the audio form my Apple Tv3 (about 13feet away).
I would normoally jusy plug in a headphone extension cable into the TV but it does
not have a headphone output jack.
I was thinking it would be the best option to simply have the audio stream to my iphone 5
thus allowing me to watch my Apple TV late at night without waking the family,
I was wanting to use the iphoine 5 as the audio sort of like a remove headphone reciever.
If l could get airplay ro play the audio from the ATV3 to the iphone5 then my guess is that
would be the best solution. Basically use the iphone 5 as an Airplay receiver / server.
Any other alternative would be great to hear. Any solution that gives me good quality sound
without cables running all over the family room.

Not possible. Audio can be output to airplay enabled speakers via ATV settings and then headphones connected to them.

The dreaded 404 message using basicHttpBinding, Transport security mode, and certificates

I am working on setting up a WCF service using mutual authentication with both client and server certifiates. The service is hosted in IIS 7, and I'm trying to access it from a simple console app. When I try to connect to the service, I get the error ""There
was no endpoint listening at
https://localhost/IISHostedService/MyService.svc that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details." The inner exception is "The remote server returned an error:
(404) Not Found."
I have seen people all over the net reporting this error, but so far none of their fixes work for me. I have an HTTPS binding in IIS for my app, and I am able to browse to my service (using either http or https) and view it with no problems. I can get the
wsdl (also over either protocol) with no issues, but connecting from the client doesn't work.
Here is my server config:
<system.serviceModel>
<behaviors>
<serviceBehaviors>
<behavior>
<serviceCredentials>
<serviceCertificate findValue="ServerCertificate" storeLocation="LocalMachine" x509FindType="FindBySubjectName" />
<clientCertificate>
<authentication revocationMode="NoCheck" />
</clientCertificate>
</serviceCredentials>
<serviceMetadata httpGetEnabled="true" httpsGetEnabled="true" />
<serviceDebug includeExceptionDetailInFaults="true" />
</behavior>
</serviceBehaviors>
</behaviors>
<serviceHostingEnvironment multipleSiteBindingsEnabled="true" />
<bindings>
<basicHttpBinding>
<binding name="BasicHttpBinding_MyService">
<security mode="Transport">
<transport clientCredentialType="Certificate" />
</security>
</binding>
</basicHttpBinding>
</bindings>
<services>
<service name="MyService">
<endpoint binding="basicHttpBinding" bindingConfiguration="BasicHttpBinding_MyService" contract="Namespace.IContract" />
</service>
</services>
</system.serviceModel>
And my client:
<system.serviceModel>
<behaviors>
<endpointBehaviors>
<behavior name="clientEndpointBehavior">
<clientCredentials>
<clientCertificate findValue="ClientCertificate" storeLocation="LocalMachine" x509FindType="FindBySubjectName"/>
</clientCredentials>
</behavior>
</endpointBehaviors>
</behaviors>
<bindings>
<basicHttpBinding>
<binding name="BasicHttpBinding_MyService" closeTimeout="00:10:00"
openTimeout="00:10:00" receiveTimeout="00:10:00" sendTimeout="00:10:00"
allowCookies="false" bypassProxyOnLocal="false" hostNameComparisonMode="StrongWildcard"
maxBufferSize="65536" maxBufferPoolSize="524288" maxReceivedMessageSize="65536"
messageEncoding="Text" textEncoding="utf-8" transferMode="Buffered"
useDefaultWebProxy="true">
<readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384"
maxBytesPerRead="4096" maxNameTableCharCount="16384" />
<security mode="Transport">
<transport clientCredentialType="Certificate" />
</security>
</binding>
</basicHttpBinding>
</bindings>
<client>
<endpoint address="https://localhost/IISHostedService/MyService.svc behaviorConfiguration="clientEndpointBehavior"
binding="basicHttpBinding" bindingConfiguration="BasicHttpBinding_MyService"
contract="Namespace.IContract" name="BasicHttpBinding_MyService" />
</client>
</system.serviceModel>
I am not sure if it matters, but this client and server are running on the same physical machine in a test environment. I have confirmed that both the client and the server certificates are installed, and that the issuing authority is trusted. The virtual
folder is set in IIS to "Accept" client certificates, and SSL is not required.
Does anyone have any thoughts what I may be missing? This service works without a problem over HTTP, so it has to be somehow related to the certificate that is being passed. With the Server certificate, I just trapped the ServicePointManager.ServerCertificateValidationCallback
event to manually approve the certificate if the subject matched what I was looking for (the subject does not match the domain name, since this is a test environment). Do I need to do something similar for the client certificate?
EDIT: One thing I do notice is that, in the WSDL, the soap location is always pointing to http. I'm not sure if that is correct or not:
<wsdl:service name="MyService">
<wsdl:port name="BasicHttpBinding_MyService" binding="tns:BasicHttpBinding_MyService">
<soap:address location="http://computerName.domain.com/IISHostedService/MyService.svc" />
</wsdl:port>
</wsdl:service>

A little more information (since this is the main thing I have to work on today):
After some research, I decided to try using a custom certificate validator, in case something is wrong with the client certificate. In the clientCertificate\authentication node on the server, I set the certificateValidationMode="Custom" and set customValidationType="MyType.Validator,
MyType". My type is apparently being found (when it is not found I get a "service could not be activated" error), but my Validate() method is never being called.
Now this leads me to believe that it's not a problem with the client certificate, but something else, before it even gets that far.

I just got iphone 5c and i am not happy with it. It uses to much data and i don't even know how. I can't get the ringtones i want for my contacts.I got it on my free upgrade but i want to take it back and get something else but where i got it they say i c

I just got iphone 5c and i am not happy with it. It uses to much data and i don't even know how. I can't get the ringtones i want for my contacts.I got it on my free upgrade but i want to take it back and get something else but where i got it they say i can't because i don't have the earbuds and i have serches or them. now i am suck with a phone i don't like at all until my next upgrade. this is very dishearten

1. If you are this unhappy with that phone, and the lost earbuds is the only thing stopping you from taking it back, why do not just buy some earbuds. That way you can get rid of that phone. It all depend upon how much you want to get rid of that phone.
2. Yet if you are stuck with that iPhone, here is something might help you to control the data usage. By design, iPhones do turn off WiFi when they go dormant. So if a download is in progress and so forth when the phone goes dormant, it will switch to use cellular data, if this setting is left on. Therefore, from multi-sources I have learned that if you keep your iPhone connected to a power source, then it will stay connected to the available WiFi.

Use smart card for 802.1x secured WiFi authentication

Hi,
is it possible to use a certificate stored on a USB Security Token for WiFi 802.1x authentication?
I have setup a test environment with all required components (AD, Enterprise CA, NPS, WPA2-Enterprise capable WiFi Access Point, all required certificates, all Server 2012 R2 / Windows 8.1 Pro) and created a user certificate for WPA2-Enterprise secured
WiFi access (802.1x). Everthing works fine as long as the user certificate is stored in the local certificate store of the user's client computer: The user can connect to the WiFi network and the NPS logs show that the user has been authenticated correctly
and granted access.
To test this scenario with a Smart Card (Safenet USB Token), I stored that same user certificate on the token (incl. private key). The Safenet software on the client computer automatically makes the certificate stored on the token available in the local
certificate store as soon as the token has been plugged in (checked via MMC Certificates snap-in). But the certificate can't obviously be used for the desired WiFi authentication: If I try to connect the secured WiFi (the same as in scenario 1) the connection
fails.
As I'm using exactly the same certificate in both scenarios, I don't think there's anything wrong with the settings in the certificate, the NPS or any other infrastructure component. The reason for failure in scenario 2 must be lying somewhere in either
the local client computer configuration or in the Safenet software on the client computer.
I'm very familiar with all the PKI and authentication stuff, but I'm new to smart cards. Are there differences between different types of smart cards and for what purpose one can use them? (USB tokens, chip cards, virtual tokens, etc.?)
Has anybody experience in creating a 802.1x secured WiFi access with smart card based user certificates who could advise?
Thanks + Best Regards
Matt

Hi,
I found some links form technet site which can be helpful in this case
Network access authentication and certificates
http://technet.microsoft.com/en-us/library/cc759575(v=ws.10).aspx
Enable smart card or other certificate authentication
http://technet.microsoft.com/en-us/library/cc737336(v=ws.10).aspx
Quote:
Client certificate requirements
With EAP-TLS or PEAP-EAP-TLS, the server accepts the client authentication attempt when the certificate meets the following requirements:
The client certificate is issued by an enterprise CA or mapped to a user or computer account in Active Directory.
The user or computer certificate on the client chains to a trusted root CA, includes the Client Authentication purpose in EKU extensions (the object identifier for Client Authentication is 1.3.6.1.5.5.7.3.2), and fails neither the checks that are performed
by CryptoAPI and specified in the remote access policy nor the Certificate object identifier checks that are specified in IAS remote access policy.
The 802.1X client does not use registry-based certificates that are either smart card-logon or password-protected certificates.
For user certificates, the Subject Alternative Name (SubjectAltName) extension in the certificate contains the user principal name (UPN).
For computer certificates, the Subject Alternative Name (SubjectAltName) extension in the certificate must contain the client's fully qualified domain name (FQDN), which is also called the DNS name
Yolanda Zhu
TechNet Community Support

I believe for the year I have not been using photoshop photography but something else so I never really used it or photoshop photography ..can you check for me

now that I just re-newed my photoshop photography ....I have not been using that for some reason I have been using something else. they had changed me a couple
of times last year from one thing to another ...so I never go photoshop photography downloaded. I used the other one very little because I wasn't sure I should...gee
I hope that makes sense.
I need to download photoshop photography.
Sherri nicholas

You need to get the owner's manual for your Ford's bluetooth system to see how to put your system into discovery mode for the iPhone as well as the appropriate steps to take.
In addition, you should see if the iPhone is supported.

How can I do mirroring of a screen from new iPad to hdtv using apple tv and still work on something else in my ipad

How can I do mirroring of a screen from new iPad to hdtv using apple tv and still work on something else in my ipad

You don't. Mirroring is duplicating your ipad screen on another projector - so you can't have another app going on your iPad without it also showing up on the projected image. Some apps are designed so that you see a different image in the iPad than the mirrored out display, but even then you're within the app itself.

HT5922 Can I airplay a movie from safari on my MacBook to Apple TV and still use the computer for something else at the same time?

Can I airplay a movie from safari on my MacBook to Apple TV and still use the computer for something else at the same time?

Hi frogjt,
Welcome to the Apple Support Communities!
Great question! You can absolutely do this in OS X 10.9. The attached article explains how the process of using AirPlay with Apple TV to create a second display. Also, towards the bottom of the article there are instructions on how to set your Displays preferences on the computer to make sure the TV and MacBook Pro displays are set up the way you want them to be.
OS X: Using multiple displays in Mavericks
http://support.apple.com/kb/HT5891
Have a great day,
Joe

Does anybody know if Windows 8 is causing a problem with iTunes? Many songs on my old iPod are now missing in my iTunes library and I can't find them anywhere. Also, I have a new iPod and am afraid of using it for fear of something else going wrong.

Does anybody know if Windows 8 is causing a problem with iTunes? Many songs on my old iPod are now missing in my iTunes library and I can't find them anywhere. . Also, I have a new iPod and am afraid of using it for fear of something else going wrong.

Try assigning Queen as the Album Artist on the compilations in iTunes on your computer.

Do I need a more recent mac mini to use my iphone 4 with. Im unable to download snow leopard because my mac mini is older. Do I need to get a new mac or is there something else i can do

Do I need a more recent mac mini to use my iphone 4 with. Im unable to download snow leopard because my mac mini is older. Do I need to get a new mac or is there something else i can do

Get Leopard.
System Requirements
Apple ID (required for some features)
Internet access6
Syncing with iTunes on a Mac or PC requires:
Mac: OS X v10.5.8 or later
PC: Windows 7; Windows Vista; or Windows XP Home or Professional with Service Pack 3 or later
iTunes 10.5 or later (free download fromwww.itunes.com/download)
http://www.apple.com/iphone/specs.html

Hi there, I'm thinking of buying both a new MacBook Pro and a small 22 inch LED tv for my kitchen... what would I need to be able to use (wireless of course) the tv as a monitor for the new computer? Apple tv? Airport Express? something else? Thanks.

Hi there, I'm thinking of buying both a new MacBook Pro and a small 22 inch LED tv for my kitchen... what would I need to be able to use (wireless of course) the tv as a monitor for the new computer? Apple tv? Airport Express? something else? Thanks.

Hi a,
http://www.mctiviausa.com/
There has been "talk" on and off of Apple TV doing it (and people have done it with a hack), but I haven't really followed it.
It would be a whole lot cheaper getting an adapter (as needed) and cable and simply pluggin it in when you're in the kitchen.

Securing WiFi, use certificates or something else?

Similar Messages

Maybe you are looking for