Configure the calling router for certificate-based EAP

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To configure the calling router for certificate-based EAP

Open Routing and Remote Access.
In the console tree, click Network Interfaces.

Where?
- Routing and Remote Access/server name/Network Interfaces
In the details pane, right-click the appropriate demand-dial interface, and then click Properties.
On the Security tab, click Advanced (custom settings), and then click Settings.
Under Logon security, click Use Extensible Authentication Protocol (EAP), click Smart card or other certificate (TLS) (encryption enabled), and then click Properties.
In the Smart Card or Other Certificate (TLS) Properties dialog box, click Use a certificate on this computer.
To enable validation of the server certificate, select the Validate server certificate check box, select the Connect to these servers check box, and then type the DNS domain name of the answering router preceded by a period.
In Trusted Root Certification Authorities, click the root certification authority of the answering router, and then click OK.
Click OK to save changes to the security configuration, and then click OK again to save changes to the demand-dial interface.
In the details pane, right-click the demand-dial interface, and then click Set credentials.
In User name on certificate, click the user certificate for this demand-dial connection, and then click OK.

Notes

To perform this procedure, you must be a member of the Administrators group. As a security best practice, consider using the Run As command rather than logging on with administrative credentials. If you have logged on with administrative credentials, you can also open Routing and Remote Access by clicking Start, clicking Control Panel, double-clicking Administrative Tools, and then double-clicking Routing and Remote Access. For more information, see Default local groups, Default groups, and Using Run as.
If the root certification authority for the answering router does not appear, the root certification authority certificate for the answering router may be in the personal store rather than trusted root certification authorities store.

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.