Windows 10: How to fix Windows Authentication Certificate error?

Hello,I have a problem that is causing me a very big Headache.I have Windows 10 Pro with all the latest updates installed.Also i run Microsoft 365 for big business installed from Microsoft Developer program.When i open Microsoft Word 365 or other app like Excel i receive a error message like the one you can see on the attatched photo that i will post here.I need some help to fix the problem.My PC is very old it's an HP6000 PRO SFF the manufacture doesn't launched any drivers for this windows version i made the free update from windows 7 pro to windows 10 everything went fine. I had to install

:)

 

#AzureAD Certificate Based Authentication is Generally Available!

Source: #AzureAD Certificate Based Authentication is Generally Available! Enterprise Mobility and Security Blog

 

Radius server + WLC and Client Certificate Authentication

Hello people,

We have an issue with our radius server.

I will explain what is our goal and what configuration we have so far:

Our goal is to authenticate clients in the domain using WLC and Client Certificate Authentication.

Each client in our domain has a unique personal certificate.

The idea is when an employee opens his PC automatically connects to the specified by the GPO recommended network by using the certificate and not the username and password.



Currently, we configured the WLC Cisco controller to receive the client certificate, authenticate it and provide the IP address(of course if the policies are validated).

Afterward that the WLC controller has to send the request to the radius server. The radius should check if the certificate is valid (not expired) and not included in the revocation list.

Here our issue came. It seems that the radius cannot access the revocation list and cannot check if the certificate is revoked.

We validated that by disabling the revocation list check in the Radius server registry settings.

If we set it to ignore the revocation list check, the authentication succeeds, and the client is authenticated successfully.

The thing is that this way we lower the security of the connection significantly and we would like to make sure the certificate is validated against the revocation list.

At the same time, there are no issues in the connection between the RADIUS server and the server where the revocation list is stored/published.



Could you please let me know if there is any specific configuration that should be made in order for the radius to be able to check the status of the authenticated certificate in the revocation list?

Is there any configuration guide that we have to follow in order to implement the necessary configuration in the most proper way?

 

E61 WEP Certificate Authentication

Thanks for your reply.

Yes, I know there is a WEP setting, but it asks for either a 64 or 128 bit WEP Key, I dont have a WEP Key but a certificate instead which authenticates the user on a domain.

The 802.1x authentication (in Windows) can have either WEP, EAP etc modes and the user is authenticated with a certificate.

Nokia E61 does not provide WEP WPA Mode only EAP and Pre-shared key.

Any other suggestions, ideas will be much appreciated.