Chapter 2: Network Setup
2 Export the authentication server certificate.
• Right click the server certificate,
• Choose All Tasks / Export.
• Export the cert, including its private key, to a PFX file. You do not need to export all
certificates in the path or to enable strong protection. You should not delete the private
key if the export is successful.
• Select a password used to encrypt and protect the certificate. In our reference design
we used g0ld11.
• Name the certificate server and save it to a folder on the server. It will save it as a .pfx
file.
3 Find the valid CA certificate installed on the authentication server.
• Run the local computer account Certificates MMC snap-in.
• Open the Trusted Root Certificate Authorities / Certificates folder.
4 Export the CA certificate.
• Right click the root CA certificate.
• Choose All Tasks / Export.
• If asked, do not export the private key.
Export the root certificate to the DER encoded binary X.509 (.CER) format.
Save and name the certificate root to a folder on the server.
The DER encoded trusted root certificates must have a .der extension but the
Microsoft certificate export tool automatically appends a .CER extension to the
exported file. You will have to manually rename the file to root.der after it has
been exported.
Installing Certificates Procedure 2-10 Installing Certificates
1 Open web browser and navigate to the Steel Belted Radius GUI:
http://172.31.0.21:1812
Click the Launch button to start Steel Belted Radius
2-29