Automatic certificate deployment for 802.1x network authentication

[Guest Ulf Leichsenring]

Hi all

 

I have a problem setting up ab big number of Windows XP (SP2) PCs for

using IEEE802.1x authentication on the wired network. I'm searching for

a way to automatically deploy a system certificate (with private key)

into the certificate store of "local computer". The certificate comes

from a third party CA.

Does anybody now a way to automatically deploy a third party certificate

into the "my certificates" store of "local computer"?

 

Any hint is welcome.

 

--

Ulf Leichsenring

ulf@leichsenring.net

[Guest Brian Komar \(MVP\)]

You must contact the vendor of the 3rd party CA (which you fail to mention)

Some 3rd party CAs have licensed Microsoft's autoenrollment methods, and can

use MS autoenrollment.

Most have not and are very week in automatic deployment to computers

Brian

"Ulf Leichsenring" <ulf@leichsenring.net> wrote in message

news:67r1t6F2q0gbfU1@mid.individual.net...<span style="color:blue">

> Hi all

>

> I have a problem setting up ab big number of Windows XP (SP2) PCs for

> using IEEE802.1x authentication on the wired network. I'm searching for

> a way to automatically deploy a system certificate (with private key)

> into the certificate store of "local computer". The certificate comes

> from a third party CA.

> Does anybody now a way to automatically deploy a third party certificate

> into the "my certificates" store of "local computer"?

>

> Any hint is welcome.

>

> --

> Ulf Leichsenring

> ulf@leichsenring.net </span>

[Guest Ulf Leichsenring]

> You must contact the vendor of the 3rd party CA (which you fail to mention)

 

Sorry, its UniCERT from Cybertrust.

<span style="color:blue">

> Some 3rd party CAs have licensed Microsoft's autoenrollment methods, and

> can use MS autoenrollment.

> Most have not and are very week in automatic deployment to computers</span>

 

Isn't there another way to automatically deploy a certificate in PKCS#12

Format into the "my certificates" store of "local computer"?

 

 

--

Ulf Leichsenring

ulf@leichsenring.net

[Guest Brian Komar \(MVP\)]

No

"Ulf Leichsenring" <ulf@leichsenring.net> wrote in message

news:67ra5iF2q98vsU1@mid.individual.net...<span style="color:blue"><span style="color:green">

>> You must contact the vendor of the 3rd party CA (which you fail to

>> mention)</span>

>

> Sorry, its UniCERT from Cybertrust.

><span style="color:green">

>> Some 3rd party CAs have licensed Microsoft's autoenrollment methods, and

>> can use MS autoenrollment.

>> Most have not and are very week in automatic deployment to computers</span>

>

> Isn't there another way to automatically deploy a certificate in PKCS#12

> Format into the "my certificates" store of "local computer"?

>

>

> --

> Ulf Leichsenring

> ulf@leichsenring.net </span>