topic Windows radius with certificate config in General Topics

Windows radius with certificate config

Jamesy — Fri, 31 Jan 2020 17:58:26 GMT

Hi there,

I am testing Radius configuration for our admin accounts using windows NPS over PEAP-MSCHAPv2. I have our local CA cert in the cert profile and configured all the required params like vendor specifi attributes,etc. When I run a test authentication profile and add my domain creds I get the message ''Response for user: "<user name>" from RADIUS server: "unable to get local issuer certificate; unknown CA" Authentication failed against RADIUS server at <server IP>:1812 for user "<user name>.

Has anyone else seen this?

Re: Windows radius with certificate config

Steve.Brill — Fri, 03 Apr 2020 23:26:26 GMT

I don't know if you've found the fix since you posted the question, but I figured my issue out. I had to not only import the Root CA and all Intermediate CA certs for my cert on my FreeRADIUS box in the certificates store on the PAN, but also had to add them to the Certificate Profile used for the RADIUS server profile. So the cert profile for the RADIUS server profile now has the cert for the client, AND all the CAs (Root and Intermediate) for the FreeRADIUS server.

Re: Windows radius with certificate config

JoshuaSanders — Wed, 22 Apr 2020 18:54:50 GMT

I'm seeing this issue but haven't been able to get it licked. I have the certificate installed on the NPS as well as the PAN but am still getting the same error.