Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Gmorrallee
Community Record
5
Posts
1
Kudos
0
Solutions
Badges
Apr 9 2021
1:22 AM
Hi - as the OP I can report we did indeed get this working - however it was a right slog (and involved many long calls with MS support!) We did get NDES working to deploy SCEP certificate deployment for user auth to the RADIUS server - the process we followed is basically here: Support Tip - How to configure NDES for SCEP certificate deployments in Intune - Microsoft Tech Community (this was provided by our MS PS tech that we ended up having engaged) However longer term we are definitely going to look at some of the other options such s Radius as a Service etc mentioned in this thread as obviously user certificates for WiFi auth is not ideal
... View more
Sep 21 2020
9:37 AM
1 Kudo
Just a quick update from me as the OP as I realised I'd not checked in here for a while. So thanks to everyone for their advice - I've not been through it all yet, however. So we eventually have the user certificates pulling down to the InTune managed AAD devices and the NPS authenticating these for the WiFi auth - but we've now hit the snag as others have mentioned about lack of ability to user a device cert for AAD devices for the NPS to authenticate against. I'm currently trying to work out if we can find a way round this (have seen several suggestions although again things I need to get my head around) or if we can style it out with the client as "a security feature" as WiFi only works when logged on 🙂
... View more
Aug 24 2020
6:31 AM
I actually had a blazing row with MS support cos they were like "oh you need to do this, this and this" but missing vital steps on actually HOW you do those things along the way.
... View more
Aug 24 2020
6:29 AM
Not yet - we seem to get loads of different parts of the puzzle but have not yet been able to complete it. We've been engaged with MS support for several months and still haven't got it resolved. We've got a field services engineer helping out now but between either or him cancelling we've still not got anywhere. Apparently it's seemingly impossible find any sort of documentation to explain this from the ground up and work through it step by step.... (i.e. what sort of certificate, what settings do we need in InTune, on the NPS box etc) Hopefully when we finally get our field service tech involved next week we might finally get there.
... View more
May 19 2020
5:00 AM
Hi all. We've taken on a new client to roll out a bunch of Azure AD joined clients to the users. As part of this they will need to use their Meraki WiFi solution. The Meraki is currently configured to use Radius on a Windows 2019 Server with NPS installed. There is an on premise AD which is synced down to Azure AD. The Radius server is currently configured to use the on premise Domain Users group for authentication. However to prevent personal devices being joined to the WiFi network using their AD creds the client wishes to use certficates to authenticate instead. We have an internal CA and the root certificate is installed on all clients via InTune. It seems the we potentially need to deploy PKCS certificates via InTune and leverage the InTune Certificate Connector to sit betweeen the CA and InTune. However the part of this I'm struggling with and can't seem to find any information on is the actual connection between the certificates deployed via InTune and the Certificate Connector and the Radius Server authentication. So basically we can get certificates to the clients but how does the Radius server know to authenticate them? Any thoughts? Thanks
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 1 | 31043 |
© 2024 Cisco Systems, Inc.
