HP iPAQ 5450 with Windows Mobile 2003 802.1x and certificates.......

andrew.butterworth · ‎08-26-2003

This maybe a bit off topic but I am struggling trying to get some answers out of HP.

We have some HP iPAQ 5450/5550's all running Windows Mobile 2003 - to use 802.1x Authentication with PEAP or TLS-EAP we need certificates installing on the PocketPCs. We have a Windows 2000 Active-Directory integrated Certificate Authority that publishes certificates to W2K machines OK - initially HP didn't include any way of importing Certificates but have released the SDK Certificate Enrolment Tool (enroll.exe). We have tried for several days to get a certificate but to no avail and we are struggling to find any information out. Has anyone on here managed this? If so how?

Thanks

Andy

pradeepde · ‎09-01-2003

Check out the following document which talks about the installation of certificates:

http://www.cisco.com/warp/public/cc/pd/sqsw/sq/tech/acstl_wp.htm

andrew.butterworth · ‎09-07-2003

Good article but it didn't help me with what I was attempting - I have a pretty good understanding of CA's and PKI, my problem was down to Windows CE Software Applications...... I managed to get this working by dort of debugging the application and the CA I was trying to use.

Andy

spilkinton · ‎09-07-2003

Andrew,

Could you provide some additonal info on how you got your scenario working? We have just went to 802.1x and a few IPAQ's running CE 2003 that need to communicate wireless.

Specific questions would be:

-- Specifically where do you get an enrollment utility?

-- Do you know how to configure if you are using EAP/TLS with MS Enterprise Certificate Services (in which all the wireless machines are joined to the ad domain)?

andrew.butterworth · ‎09-13-2003

Obviously the WindowsCE devices can't be 'members' of the domain as they would need W2K to do that (create a computer account etc). The enrollment tool is available from HP's website (software & drivers etc). Once I installed the enroll.exe tool I modified the enroll.cfg file to request a 'computer' certificate from my CA, this is now installed and appears in 'Settings, System, Certificates'. I have yet to actually test this with a Cisco AP as I just can't get my hands on one.......

Andy