I'm pretty sure I'm missing a step right here but I've got a phone call coming in any minute and I'm trying to get this submitted. I don't recall for sure but I think this is part of the Wizard in Server 2008 Certificate Services - I know it's friggin' easy as well, but I'd have to go back and check to be certain.ĭepending on how your wireless network is set up, you go into your RADIUS server and either define the wireless controller IPs as RADIUS clients or your APs (depends on where your RADIUS authentication will come from, and you define the access group as machine-level, with Domain Computers as the accounts that can authenticate. Next you set up a GPO that enrolls and distributes machine certs that your internal CA issues. Follow the Add a Role Prompts on Server 2008 or 2012. You start by setting up a PKI environment, which involves setting up certificate services on a machine in your environment, which will become your Enterprise Root CA. It has been four years since I set up our RADIUS+WPA2 PEAP TLS environment and I'm not at work right now but the basic gist is this (please correct me hive mind if I miss a step).
