Showing posts with label network. Show all posts
Showing posts with label network. Show all posts

Cisco Wireless - Validate server certificate

2 comments
It is a pain to uncheck the "Validate server certificate" box everytime. Seems easy to add a server cert to Cisco wireless network (ie ACS), from Cisco ACS This guide describes certificates created with a Microsoft CA and also contains steps for when you use a self-signing certificate, which is supported as of Cisco Secure Access Control Server (ACS) 3.3. The use of a self-signing certificate streamlines the initial Protected Extensible Authentication Protocol (PEAP) installation considerably since no external CA is required. But, at this time, the default expiration period of the self-signing certificate is only one year and cannot be changed. This is standard when it comes to server certificates. But since the self-signed certificate also acts as the root CA certificate, this can mean the installation of the new certificate on every client every year when you use the Microsoft supplicant unless you do not check the Validate Server Certificate option. Cisco recommends that you use self-signing certificates only as a temporary measure until you can use a traditional CA. If you wish to use a self-signing certificate, proceed to the self-signing certificates section.