Enabling machine authentication – Cisco 3.3 User Manual
Page 506
Chapter 13 User Databases
Windows User Database
13-22
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
d.
On the Protected EAP Properties dialog box, you can enforce that
Cisco Secure ACS has a valid server certificate by selecting the Validate
server certificate check box. If you do select this check box, you must
also select the applicable Trusted Root Certification Authorities.
e.
Also open the PEAP properties dialog box, from the Select
Authentication Method list, select Secured password (EAP-MSCHAP
v2).
5.
To enable EAP-TLS machine authentication, configure the Authentication
tab. In Windows XP, the Authentication tab is available from the properties of
the wireless network. In Windows 2000, it is available from the properties of
the wireless network connection.
a.
Select the Enable network access control using IEEE 802.1X check
box.
b.
Select the Authenticate as computer when computer information is
available check box.
c.
From the EAP type list, select Smart Card or other Certificate.
d.
On the Smart Card or other Certificate Properties dialog box, select the
Use a certificate on this computer option.
e.
Also on the Smart Card or other Certificate Properties dialog box, you
can enforce that Cisco Secure ACS has a valid server certificate by
selecting the Validate server certificate check box. If you do select this
check box, you must also select the applicable Trusted Root Certification
Authorities.
If you have a Microsoft certification authority server configured on the domain
controller, you can configure a policy in Active Directory to produce a client
certificate automatically when a computer is added to the domain. For more
information, see
.
Enabling Machine Authentication
This procedure provides an overview of the detailed procedures required to
configure Cisco Secure ACS to support machine authentication.