Automatic certificate deployment for 802.1x network authentication

[Ulf Leichsenring]

Hi all

I have a problem setting up ab big number of Windows XP (SP2) PCs for
using IEEE802.1x authentication on the wired network. I'm searching for
a way to automatically deploy a system certificate (with private key)
into the certificate store of "local computer". The certificate comes
from a third party CA.
Does anybody now a way to automatically deploy a third party certificate
into the "my certificates" store of "local computer"?

Any hint is welcome.

--
Ulf Leichsenring
ulf@leichsenring.net

 

[Brian Komar \(MVP\)]

You must contact the vendor of the 3rd party CA (which you fail to mention)
Some 3rd party CAs have licensed Microsoft's autoenrollment methods, and can
use MS autoenrollment.
Most have not and are very week in automatic deployment to computers
Brian
"Ulf Leichsenring" <ulf@leichsenring.net> wrote in message
news:67r1t6F2q0gbfU1@mid.individual.net...
> Hi all
>
> I have a problem setting up ab big number of Windows XP (SP2) PCs for
> using IEEE802.1x authentication on the wired network. I'm searching for
> a way to automatically deploy a system certificate (with private key)
> into the certificate store of "local computer". The certificate comes
> from a third party CA.
> Does anybody now a way to automatically deploy a third party certificate
> into the "my certificates" store of "local computer"?
>
> Any hint is welcome.
>
> --
> Ulf Leichsenring
> ulf@leichsenring.net

 

[Ulf Leichsenring]

> You must contact the vendor of the 3rd party CA (which you fail to mention)

Sorry, its UniCERT from Cybertrust.

> Some 3rd party CAs have licensed Microsoft's autoenrollment methods, and
> can use MS autoenrollment.
> Most have not and are very week in automatic deployment to computers

Isn't there another way to automatically deploy a certificate in PKCS#12
Format into the "my certificates" store of "local computer"?


--
Ulf Leichsenring
ulf@leichsenring.net

 

[Brian Komar \(MVP\)]

No
"Ulf Leichsenring" <ulf@leichsenring.net> wrote in message
news:67ra5iF2q98vsU1@mid.individual.net...
>> You must contact the vendor of the 3rd party CA (which you fail to
>> mention)
>
> Sorry, its UniCERT from Cybertrust.
>
>> Some 3rd party CAs have licensed Microsoft's autoenrollment methods, and
>> can use MS autoenrollment.
>> Most have not and are very week in automatic deployment to computers
>
> Isn't there another way to automatically deploy a certificate in PKCS#12
> Format into the "my certificates" store of "local computer"?
>
>
> --
> Ulf Leichsenring
> ulf@leichsenring.net