I am not aware of a way to automatically set the trust settings within OS X 10.4 (Mac said this was a security feature so user had to validate the trust of EAP certificates). Leopard however has been changed so that is something that can somehow be set automatically.
On the windows supplicant I am not sure as we use the third party SecureW2, even though I know there is a setting under the PEAP settings. -- Walt Reynolds Principle Systems Security Development Engineer Information Technology Central Services University of Michigan (734) 615-9438 > -----Original Message----- > From: The EDUCAUSE Wireless Issues Constituent Group Listserv > [mailto:[EMAIL PROTECTED] On Behalf Of Hector J Rios > Sent: Wednesday, July 23, 2008 10:37 AM > To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > Subject: [WIRELESS-LAN] Certificate validation... > > We are a Cisco LWAPP shop and have a PEAP/WPA secure wireless network. > For our certificates we have a PKI which is trusted through GTE Cyber > Trust Global Root. When a first time user connects to the wireless they > are prompted with a window that tells them that the certificate is not > trusted. So they verify the certificate, make sure it comes from us, > accept it and go on to connect. This is mostly an issue in MACs > > > > So I know the problem is caused because the computer is unable to > correctly chase down the root issuing CA. Is anyone else in this same > situation? If so, have you done anything to get a around it? Does > anybody know if there is anything that can be done to get around this > problem? > > > > I'm only asking because once in a while we get users that complain about > this issue. > > > > Thanks, > > > > Hector Rios > Telecommunications Analyst, NI > LSU Information Technology Services > [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> > > > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
