Security

Hello All and Thank you in advance for your help. 

I have a windows radius server up and running and working with 802.1x windows logins.  I am trying to add a certificate too so the user has to have both.  On the radius server, I added in EAP Types smart card or other certificate. Under EAP Types is there a certain order they need to be in to get the windows user authentication and then look for the certificate that I have?

Are you looking to have both user (with user certificate) and computer (with computer certificate) authenticated with Microsoft NPS?

I don't think that is possible with NPS. You may have a look at TEAP for dual authentication, but don't know if NPS supports that.

Hello All and Thank you in advance for your help. 

I have a windows radius server up and running and working with 802.1x windows logins.  I am trying to add a certificate too so the user has to have both.  On the radius server, I added in EAP Types smart card or other certificate. Under EAP Types is there a certain order they need to be in to get the windows user authentication and then look for the certificate that I have?

No.  The user would login with their windows credentials, and the certificate would be installed on the PC.

Are you looking to have both user (with user certificate) and computer (with computer certificate) authenticated with Microsoft NPS?

I don't think that is possible with NPS. You may have a look at TEAP for dual authentication, but don't know if NPS supports that.

Hello All and Thank you in advance for your help. 

I have a windows radius server up and running and working with 802.1x windows logins.  I am trying to add a certificate too so the user has to have both.  On the radius server, I added in EAP Types smart card or other certificate. Under EAP Types is there a certain order they need to be in to get the windows user authentication and then look for the certificate that I have?

bump

No.  The user would login with their windows credentials, and the certificate would be installed on the PC.

Are you looking to have both user (with user certificate) and computer (with computer certificate) authenticated with Microsoft NPS?

I don't think that is possible with NPS. You may have a look at TEAP for dual authentication, but don't know if NPS supports that.

Hello All and Thank you in advance for your help. 

I have a windows radius server up and running and working with 802.1x windows logins.  I am trying to add a certificate too so the user has to have both.  On the radius server, I added in EAP Types smart card or other certificate. Under EAP Types is there a certain order they need to be in to get the windows user authentication and then look for the certificate that I have?

You haven't clarified your ask.  Are you wanting EAP-TLS or EAP-PEAP/MS-CHAPv2?  Are you wanting user authentication, computer authentication, or both?  What certificate are you installing?

There are a bunch of guides available on the Internet for how to configure 802.1X support on a Windows client.

bump

No.  The user would login with their windows credentials, and the certificate would be installed on the PC.

Are you looking to have both user (with user certificate) and computer (with computer certificate) authenticated with Microsoft NPS?

I don't think that is possible with NPS. You may have a look at TEAP for dual authentication, but don't know if NPS supports that.

Hello All and Thank you in advance for your help. 

I have a windows radius server up and running and working with 802.1x windows logins.  I am trying to add a certificate too so the user has to have both.  On the radius server, I added in EAP Types smart card or other certificate. Under EAP Types is there a certain order they need to be in to get the windows user authentication and then look for the certificate that I have?

I would like to do computer auth.  I have the 802.1x  working.  I have a certificate from my AD Root CA.  

You haven't clarified your ask.  Are you wanting EAP-TLS or EAP-PEAP/MS-CHAPv2?  Are you wanting user authentication, computer authentication, or both?  What certificate are you installing?

There are a bunch of guides available on the Internet for how to configure 802.1X support on a Windows client.

bump

No.  The user would login with their windows credentials, and the certificate would be installed on the PC.

Are you looking to have both user (with user certificate) and computer (with computer certificate) authenticated with Microsoft NPS?

I don't think that is possible with NPS. You may have a look at TEAP for dual authentication, but don't know if NPS supports that.

Hello All and Thank you in advance for your help. 

I have a windows radius server up and running and working with 802.1x windows logins.  I am trying to add a certificate too so the user has to have both.  On the radius server, I added in EAP Types smart card or other certificate. Under EAP Types is there a certain order they need to be in to get the windows user authentication and then look for the certificate that I have?