EAP-TLS possible problem

knik-knik · ‎09-20-2008

Hi everyone, were using EAP-TLS for wlan security. we got hundreds of wlan users, what will happen if the client certificate expires? what can we do avoid it?

thanks

Scott Fella · ‎09-20-2008

I too would like to hear some ways to get around that. I have never had experience with the certification expireing, but what I have been told is that you can have GPO have the clients renew the certificate at a given time before expiration. They say that it should be configured to have clients renew at half life of the cert expiration. GPO as I was told is the only way to get around having to manually enrol of a new certificate.

-Scott
*** Please rate helpful posts ***

ivosevicd · ‎09-22-2008

Hi,

there is an option under the certificate template configuration, that renews client certificates when they expire.

See point 15 under "Create the Certificate Template for the ACS Web Server" on this link:

http://www.cisco.com/en/US/partner/products/ps6366/products_configuration_example09186a00807917a6.shtml

Hope this helps!