802.1x for non-domain machines

13 Apr 2005 10:56 PM

Carlos A. Morillo

Is it possible to assign a machine (XP not part of the domain) a certificate
to access a wireless network? I don't care for accessing the domain as the
machine is not a member of it. I just need a way to authenticate to the
wireless AP anf get an IP address to browse the internet.

14 Apr 2005 5:34 PM

Taroon Mandhana(MSFT)

Yes, it is.
On windows, every user has a cert store. If you add the certificate to the
certstore for a particular user, he/she will be able to get access to the
network. The machine need not be part of the domain.

The microsoft CA (and may be others) may expose a web interface to request a
certificate. That interface should allow to request a certificate, and later
install it as well.

Thanks,
Taroon

--

This posting is provided "AS IS" with no warranties, and confers no rights.

Show quoteHide quote

"Carlos A. Morillo" <carlos.mori***@myrealbox.com> wrote in message
news:OI%2376vHQFHA.2932@TK2MSFTNGP09.phx.gbl...
> Is it possible to assign a machine (XP not part of the domain) a
> certificate to access a wireless network? I don't care for accessing the
> domain as the machine is not a member of it. I just need a way to
> authenticate to the wireless AP anf get an IP address to browse the
> internet.
>
>