How can I save Protected EAP credentials to the registry for a WiFi profile?
This question here mentions how one can retrieve the Protected EAP credentials from the registry for a wlan profile.
Is it possible for me to save the PEAP credentials to this reg key in a similar way? We're looking to automate users connecting to a wlan network for which we already have a profile but we get a popup for the PEAP credentials currently.
It's suggested that it's possible here but no detailed explanation.
FYI- Windows 10, if that makes a difference.
windows networking wireless-networking windows-registry
asked Jan 10 at 14:47
GoldieLocksGoldieLocks
374137
add a comment |
This question here mentions how one can retrieve the Protected EAP credentials from the registry for a wlan profile.
Is it possible for me to save the PEAP credentials to this reg key in a similar way? We're looking to automate users connecting to a wlan network for which we already have a profile but we get a popup for the PEAP credentials currently.
It's suggested that it's possible here but no detailed explanation.
FYI- Windows 10, if that makes a difference.
windows networking wireless-networking windows-registry
asked Jan 10 at 14:47
GoldieLocksGoldieLocks
374137
I think the prescribed way to make a Windows machine autojoin a WPA2-Enterprise network is to enable EAP-TLS on the authentication server and issue the Windows machine an EAP-TLS identity (.p12/.pfx, containing both a cert linking the machine's name to its private key, and the private key that goes with it). Then you store all that stuff in the cert store, not the registry.
– Spiff
Jan 10 at 19:28
@Spiff yes understood but this is for a specific time-sensitive scenario which unfortunately can't rely on a certificate being issued and delivered in a timely fashion. And is also based on existing WiFi infrastructure which can't be changed!
– GoldieLocks
Jan 14 at 14:19
add a comment |
This question here mentions how one can retrieve the Protected EAP credentials from the registry for a wlan profile.
Is it possible for me to save the PEAP credentials to this reg key in a similar way? We're looking to automate users connecting to a wlan network for which we already have a profile but we get a popup for the PEAP credentials currently.
It's suggested that it's possible here but no detailed explanation.
FYI- Windows 10, if that makes a difference.
windows networking wireless-networking windows-registry
asked Jan 10 at 14:47
GoldieLocksGoldieLocks
374137
This question here mentions how one can retrieve the Protected EAP credentials from the registry for a wlan profile.
Is it possible for me to save the PEAP credentials to this reg key in a similar way? We're looking to automate users connecting to a wlan network for which we already have a profile but we get a popup for the PEAP credentials currently.
It's suggested that it's possible here but no detailed explanation.
FYI- Windows 10, if that makes a difference.
windows networking wireless-networking windows-registry
windows networking wireless-networking windows-registry
asked Jan 10 at 14:47
GoldieLocksGoldieLocks
374137
asked Jan 10 at 14:47
GoldieLocksGoldieLocks
374137
asked Jan 10 at 14:47
GoldieLocksGoldieLocks
374137
asked Jan 10 at 14:47
GoldieLocksGoldieLocks
374137
asked Jan 10 at 14:47
GoldieLocksGoldieLocks
374137
374137
I think the prescribed way to make a Windows machine autojoin a WPA2-Enterprise network is to enable EAP-TLS on the authentication server and issue the Windows machine an EAP-TLS identity (.p12/.pfx, containing both a cert linking the machine's name to its private key, and the private key that goes with it). Then you store all that stuff in the cert store, not the registry.
– Spiff
Jan 10 at 19:28
@Spiff yes understood but this is for a specific time-sensitive scenario which unfortunately can't rely on a certificate being issued and delivered in a timely fashion. And is also based on existing WiFi infrastructure which can't be changed!
– GoldieLocks
Jan 14 at 14:19
add a comment |
I think the prescribed way to make a Windows machine autojoin a WPA2-Enterprise network is to enable EAP-TLS on the authentication server and issue the Windows machine an EAP-TLS identity (.p12/.pfx, containing both a cert linking the machine's name to its private key, and the private key that goes with it). Then you store all that stuff in the cert store, not the registry.
– Spiff
Jan 10 at 19:28
@Spiff yes understood but this is for a specific time-sensitive scenario which unfortunately can't rely on a certificate being issued and delivered in a timely fashion. And is also based on existing WiFi infrastructure which can't be changed!
– GoldieLocks
Jan 14 at 14:19
I think the prescribed way to make a Windows machine autojoin a WPA2-Enterprise network is to enable EAP-TLS on the authentication server and issue the Windows machine an EAP-TLS identity (.p12/.pfx, containing both a cert linking the machine's name to its private key, and the private key that goes with it). Then you store all that stuff in the cert store, not the registry.
– Spiff
Jan 10 at 19:28
I think the prescribed way to make a Windows machine autojoin a WPA2-Enterprise network is to enable EAP-TLS on the authentication server and issue the Windows machine an EAP-TLS identity (.p12/.pfx, containing both a cert linking the machine's name to its private key, and the private key that goes with it). Then you store all that stuff in the cert store, not the registry.
– Spiff
Jan 10 at 19:28
@Spiff yes understood but this is for a specific time-sensitive scenario which unfortunately can't rely on a certificate being issued and delivered in a timely fashion. And is also based on existing WiFi infrastructure which can't be changed!
– GoldieLocks
Jan 14 at 14:19
@Spiff yes understood but this is for a specific time-sensitive scenario which unfortunately can't rely on a certificate being issued and delivered in a timely fashion. And is also based on existing WiFi infrastructure which can't be changed!
– GoldieLocks
Jan 14 at 14:19
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1392774%2fhow-can-i-save-protected-eap-credentials-to-the-registry-for-a-wifi-profile%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1392774%2fhow-can-i-save-protected-eap-credentials-to-the-registry-for-a-wifi-profile%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
I think the prescribed way to make a Windows machine autojoin a WPA2-Enterprise network is to enable EAP-TLS on the authentication server and issue the Windows machine an EAP-TLS identity (.p12/.pfx, containing both a cert linking the machine's name to its private key, and the private key that goes with it). Then you store all that stuff in the cert store, not the registry.
– Spiff
Jan 10 at 19:28
@Spiff yes understood but this is for a specific time-sensitive scenario which unfortunately can't rely on a certificate being issued and delivered in a timely fashion. And is also based on existing WiFi infrastructure which can't be changed!
– GoldieLocks
Jan 14 at 14:19