24.5. Deploying Certificates to Users and Computers

The following sections provide recommendations for deploying the necessary certificates for 802.1x authentication for wireless networks.

24.5.1. RADIUS Server

When implementing 802.1x authentication, it is recommended to use Windows Server 2008 Network Policy Server (NPS) as the RADIUS server. The implementation of computer running Windows Server 2008 allows you to restrict certificate-based authentication to certificates with a designated OID in the certificate, such as a custom application policy OID.