CA Requirement for EAP-TLS

[fobzy_cisco]

Hello All,

I am aware there is a Cisco Requirement for "User certificates " and "AAA certificates" used in EAP-TLS. Does anyone know what the requirements are for the CA cetificates in EAP-TLS please?

Thanks.

[Sandeep Choudhary]

check this out:

http://support.microsoft.com/kb/814394

Regards

dont forget to rate helpful posts

[Christos Stefaneskou · Accepted solution]

Hi,

You need to have 2 certificates on client and your radius server.

First certificate is the "Root Cert" which is the same on both devices.

The second certificate is the "User Cert" which is unique for every client and aaa server.

Below you can find more details for EAP-TLS:

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_white_paper09186a008009256b.shtml

Regards.