OpenSSL Certificates used for NPS EAP - Reason Code 295 (CA certificates is not trusted by the policy provider)

[Dave Baddorf]

I have a customer that I am trying to get Network Policy Server working with EAP TLS authentication for WiFi AP's. I've used OpenSSL to create a CA cert (ca.crt), Server Cert (server.pfx), and Client Cert (client1.pvx) following Secure your servers: generate self-signed certificates with OpenSSL. When I try to connect to the WiFi SSI which is being authenticated by NPS, in the Network Policy and Access Services Event Log, I get an event ID 6273: Network Policy Server denied access to a user, Reason Code: 295 "A certification chai

Continue reading...