Windows Wireless Supplicants do not make use of Subject Alternate Name. Hence even though the NPS server certificate can have DNS name in the SAN extension, the windows clients will only authenticate the server with its subject name. Hence in the wireless GPO setting, the server name should be specified as it appears in the subject name and not the DNS name. If the setting specified in the GPO does not match with the subject name of the certificate, clients will display Server Credentials could
↧