Timeline for Restrict Microsoft Network Policy Server (NPS) to only trust client certificates from a given CA?
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 30, 2020 at 15:08 | comment | added | user185953 | I see I can configure this on 802.1x clients (i.e. for validating the server), but I can't see a similar option on the NPS (i.e. for validating the clients) | |
| Feb 17, 2017 at 13:46 | comment | added | ziesemer | I'd also be curious to hear more about your security concerns with Enterprise Root CAs. | |
| Feb 17, 2017 at 13:45 | comment | added | ziesemer | I'm not entirely convinced that a custom EKU would be as good as restricting the server-side trust to a specific CA cert, but this would at least be something. However, I can't see that there are any options for enabling certificate restrictions for client auth within NPS - CA cert, EKU, or otherwise - hence the question here. | |
| Feb 17, 2017 at 13:23 | review | First posts | |||
| Feb 17, 2017 at 14:04 | |||||
| Feb 17, 2017 at 13:15 | history | answered | Paul Adare | CC BY-SA 3.0 |