Installing a RAS and IAS Server Certificate

[newbobbys9]

I have been following instructions to set up a RADIUS server to controll wireless access on our network. We have a CA set up on a 2003 DC. According to instructions I have, I should enable a template for RAS And IAS Server on the CA. That template option is not on the list, even though I registered the IAS server in active directory. Is it that we still have NT 4 domains, and are not yet in native mode? Any help would be appreciated.

 

[aftertaf]

Is your CA a root CA?
Entreprise or stand alone?

Aftertaf

getting quite good at sorting out Windows problems...
An expert when it comes to crashing Linux distributions (mdk, debian - nothing withstands me)

 

[aftertaf]

and what OS do your clients have?

Aftertaf

getting quite good at sorting out Windows problems...
An expert when it comes to crashing Linux distributions (mdk, debian - nothing withstands me)

 

[ecunupe]

Take a look here to add the template.

http://www.microsoft.com/resources/...rprise/proddocs/en-us/ctcon_howto_addtemp.asp

 

[newbobbys9]

Thanks for the replys. We are running 2003 standard, and the clients are a mix of XP Pro, 2000 Workstation and 98. The link helps, but raises another question. When I run the certtmpl.msc, I can see the RAS And IAS template, but it doesn't show up in my certificate authority mmc. Is this because I have 2003 Std and not 2003 Enterprise? Or is there a way to get the template into my CA mmc? (It indicates that it is allowed.)Thanks.

 

[aftertaf]

normally you import it into your certificate store..
if i remember right.
not bcos of entreprise edition...

Aftertaf

getting quite good at sorting out Windows problems...
An expert when it comes to crashing Linux distributions (mdk, debian - nothing withstands me)

 

[newbobbys9]

I am beginning to think that it might be it may be because of Standard 2003. When I right click properties on the template in certtmpl.msc, it says that the minimum CA is 2003 Enterprise Edition. I guess I am stuck until I upgrade, unless I am mistaken here.

 

[sicktrick]

sorry to ask a noob question, but what are the benefits of having certificates?

 

[newbobbys9]

I could ceate a group policy filtered to wireless users that would require them to obtain a certificate to grant access to any of our access points. As it is, anyone can hit our access point and get on our network. I feel that this is one of our biggest vulnerability; most IT magazines today have articles on the subject.