Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Does it require certificate to enable PEAP?

April 26, 2017Certificate enable PEAP require

0

Posted

Does it require certificate to enable PEAP?

1 Answer

0

Posted

Yes on the NPS server side (because PEAP is based upon TLS). Optional on the client side – depends upon what EAP method is carried inside PEAP. If it is PEAP-MSCHAPv2 – you don’t need on the client side. But if it is PEAP-EAPTLS or PEAP-EAPsmartcard – you need client side certificate too. Note: If you are using L2TP/IPsec tunnel, then you need machine certificates on VPN client as well as RRAS server side – but this is independent of NAP scenario.