Common examples of trusted CAs include GoDaddy and VeriSign. Acquire a certificate from a trusted Certificate AuthorityĪs long as the CA used is trusted by clients on the network, a certificate can be purchased and uploaded into NPS to accomplish and server identity verification (required by clients).There are three options for this certificate: Now that all the RADIUS clients are setup we need to setup the access policy, but first you need to make sure you have a certificate in the local computer store.Ī RADIUS server must host a certificate that allows both network clients and APs to validate the server’s identity. Once you have done this, any you have added will be listed: Repeat this process for any of your wireless access points you want to act as RADIUS clients. Under ‘ Shared Secret’ select the template we created earlier and click ‘ OK’: This will be the address of your first wireless access points. Next under ‘ RADIUS Clients and Servers’ right click ‘ RADIUS Clients’ and click ‘ New’:įill this out with the relevant information, under ‘ Address’ enter the IP address of your first RADIUS client.

If this is the case you can shorten the shared secret to a more appropriate size or create your own. If you hover over the yellow warning sign you will see a message telling you that it may be too long for some clients. Make a note of the share secret, this is needed later. Give the template a name and either enter your own shared secret or click the ‘ Generate’ radial button and then click ‘ Generate’ at the bottom. In the long run it is easier to create a template with this in to save entering it on each RADIUS client we setup.Įxpand ‘ Template Management’ and right click on ‘ Shared Secrets’ and click ‘ New’: All of the RADIUS clients that will authenticate with the server will need this shared secret so that they can authenticate. Next we want to create a template for your shared secrets. If you see the same add to your domain and then come back to this step) (In this example it is shown as greyed out because I haven’t added to AD yet. Or you can deploy one of our domain controllers into GCP and provide Active Directory within GCP We do this by right clicking the top of the tree and then clicking ‘ Register server in Active Directory’: (This can be your onprem Active Directory). The first thing you want to do is register this NPS with your active directory. Open ‘ Network Policy Server’ from the desktop or administrative tools:

Next, Once you have logged into the GCP RADIUS server, you are now ready to configure it for wireless authentication with your Active Directory.

The following link explains how to RDP into your new VM: How to RDP to Google GCP Instance Configure NPS Server The first step is to RDP into your new VM. Once you have deployed our RADIUS server solution from the GCP marketplace.

Powershell radius test