0

While reading up about WPA2-Enterprise, it states that it is more preferred over WPA2-Personal as it allows authentication via digital certificates which prevents over-the-air attacks.

However, I am unsure of the following implications about this implementation. If WPA2-Enterprise was to be implemented:

  • Can the authentication cert on machine A be dumped out, installed on machine B and use to authenticate to the network?
  • If user A uses a domain user account to login to machine A, and connects to the network using an authentication cert. user A also has a local admin account on machine A. Is it possible for the local admin account to obtain the authentication cert of the domain user account on machine A and install it onto machine B and login using the same domain user account?
  • Can I issue unique certificates to each machine for authentication or do they have to request one during the authentication process?

Apologies in advance for the weird question, have no previous experience with WPA2-Enterprise at all!

Improve this question

1 Answer 1

Reset to default
0

Can the authentication cert on machine A be dumped out, installed on machine B and use to authenticate to the network?

technically, yes.

If machine A was a domain user, but has local admin privileges is the above scenario still possible?

I didn't get the first part: how machine can become a user?

Can I issue unique certificates to each machine for authentication or do they have to request one during the authentication process?

yes.

Improve this answer
2
  • Thank you very much for the reply!!
    – new-to-networking
    May 11, 2021 at 7:56
  • yes, local administrator is a highly priveleged account that can do literally everything.
    – Crypt32
    May 11, 2021 at 7:58

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .