Hi
Kinda new to the whole NPS and CA side of things so apologies if the question comes across stupid or my replies do :)
We've got a meru wifi solution that uses a two 2008R2 radius servers to authenticate the domained laptops. Yesterday the laptops stopped connecting to the SSID using radius.
I've checked the security event logs on one of the radius servers and seems to have problems with the EAP?
Authentication Details:
Connection Request Policy Name: Wireless Policy 1
Network Policy Name: Staff Compliant
Authentication Provider: Windows
Authentication Server: <FQDN>
Authentication Type: EAP
EAP Type: -
Account Session Identifier: -
Logging Results: Accounting information was written to the local log file.
Reason Code: 22
Reason: The client could not be authenticated because the Extensible Authentication Protocol (EAP) Type cannot be processed by the server.
I've checked all the network polices we have and under the constraints tab i can't seem to edit the EAP Type: (Microsoft: Protected EAP (PEAP)). I get the message "A certicate could not be found that can be used with this Extensible Authentication Protocol"
I've checked the cert with have on the NPS and it looks to have expired last month. But when i try to renew the cert with same key its saying the permissions on the CA does not allow the current user to enroll for certificates. I've checked the permissions on the CA template we are using and both account and server have enrol and auto enrol. The server is part of the RAS and IAS server group. I've even added the server directly to the Cert template and given both account and server full control but still no joy.
Any help would be appreciated. Like i said at the top this is the first time dealing with NPS and CAs so learning at the same time.
Cheers
J