I've shown how to set up a WPA Enterprise architecture with EAP-TLS using a user certificate. You can find the tutorial here. This works quite well, but in some situations it may not be appropriate, as the network connection will only be established once the user session has been opened.
To remedy this, we need to use computer authentication. With this method, the computer will establish a connection at system start-up, i.e. from the Lock Screen.
In this guide, I'll describe the steps involved in deploying computer certificates in an AD CS architecture, so that you can authenticate with them.
This guide assumes that the AD CS architecture is already installed and operational. For a detailed explanation of how to set up an ADCS architecture, follow this link: Implementing WPA Enterprise (802.1X and RADIUS) with EAP-TLS on UniFi WiFi Access Points.
From the AD CS server, we'll create a certificate template for our workstations, which will enable us to generate the certificates used for computer authentication.
Finally, click OK to create the template.
Once the AD CS has been properly configured, we can request a Workstation certificate from any Domain Computer.
To automate the certificate renewal process, we can create a GPO and apply it to the domain computers.
C:\> gpupdate
Contact :