{"id":75232,"date":"2023-06-05T13:12:03","date_gmt":"2023-06-05T17:12:03","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=75232"},"modified":"2024-06-12T12:55:09","modified_gmt":"2024-06-12T16:55:09","slug":"configure-eap-ttls-pap-on-windows-for-radius","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-windows-for-radius","title":{"rendered":"Configure EAP-TTLS\/PAP on Windows for RADIUS"},"content":{"rendered":"\n<p><em>Additional configuration is necessary if opting to use EAP-TTLS\/PAP authentication for wireless clients. JumpCloud recommends when possible to utilize PEAP for authentication, as no additional configuration is necessary with rare exceptions.&nbsp; Please refer to <a href=\"https:\/\/jumpcloud.com\/support\/configure-your-wifi-clients-to-use-radius\">Configure your WiFi Clients to use RADIUS<\/a> for additional information.<br><\/em><br>EAP-TTLS\/PAP is a widely deployed authentication protocol. Learn to configure EAP-TTLS\/PAP on JumpCloud RADIUS clients that run Windows.<br><br><em>Prerequisites:<\/em><\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/jumpcloud.com\/support\/radius-configuration-and-authentication\" target=\"_blank\" rel=\"noreferrer noopener\">RADIUS Configuration and Authentication<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/configure-a-wap-vpn-or-router-for-radius\">Configure a Wireless Access Point (WAP), VPN or Router for RADIUS<\/a><\/li>\n\n\n\n<li>This process is for the initial configuration to use the JumpCloud RADIUS certificate.<\/li>\n\n\n\n<li>To learn more about the RADIUS authentication protocols supported by JumpCloud, see <a href=\"https:\/\/jumpcloud.com\/support\/radius-protocol-support\">RADIUS Protocol Support<\/a>.<\/li>\n<\/ul>\n\n\n\n<p><br>For supported Windows versions, this protocol is natively supported. Other operating systems may also have native support or may require a third party supplicant.<\/p>\n\n\n\n<ul>\n<li>See <a href=\"https:\/\/jumpcloud.com\/support\/agent-compatibility-system-requirements-and-impacts\">Agent Compatibility, System Requirements, and Impacts<\/a> for supported versions.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Download the JumpCloud RADIUS Certificate<\/h2>\n\n\n\n<p>In order for Windows to trust JumpCloud&#8217;s RADIUS servers, a certificate must be installed on each client system being configured for access.&nbsp; Download the <a href=\"https:\/\/support.jumpcloud.com\/support\/s\/article\/updating-radius-certificates-on-existing-eap-ttls-client-systems-2019-08-21-10-36-47\">JumpCloud RADIUS certificate here<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Import the JumpCloud RADIUS Certificate<\/h2>\n\n\n\n<ol>\n<li>Select Start, type mmc, and then press <strong>ENTER<\/strong>.<\/li>\n\n\n\n<li>On the File menu, select <strong>Add\/Remove Snap-in<\/strong>.<\/li>\n\n\n\n<li>Under Available snap-ins, select <strong>Certificates<\/strong>, and then select <strong>Add<\/strong>.<\/li>\n\n\n\n<li>Select<strong> Local computer<\/strong>, and select <strong>Finish<\/strong>.<\/li>\n\n\n\n<li>Select <strong>OK<\/strong>.<\/li>\n\n\n\n<li>In the console tree, double-click <strong>Certificates<\/strong>.<\/li>\n\n\n\n<li>Right-click the <strong>Trusted Root Certification Authorities<\/strong> store.<\/li>\n\n\n\n<li>Select <strong>All Tasks<\/strong>, select<strong> Import<\/strong> to import the certificate.<\/li>\n\n\n\n<li>Within the Certificate Import Wizard, select the file download above and select <strong>Next<\/strong>.<\/li>\n\n\n\n<li>Choose to Place all certificates in the following store with a value of Trusted Root Certification Authorities.<\/li>\n\n\n\n<li>Select <strong>Finish<\/strong>.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>The 2023 cert is valid until <strong>July 10, 2024<\/strong>. For more information, see <a href=\"https:\/\/jumpcloud.com\/support\/update-radius-certificates-for-eap-ttls-systems\" target=\"_blank\" rel=\"noreferrer noopener\">Update RADIUS Certificates<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p>Alternatively, you can download and import the new certificate manually from the command line, as shown in the following examples:<\/p>\n\n\n\n<p><code>Import-Certificate -FilePath &#8220;C:\\Windows\\Temp\\<a href=\"https:\/\/radius.jumpcloud.com\/\">radius.jumpcloud.com<\/a>-2022.crt&#8221; -CertStoreLocation Cert:\\LocalMachine\\Root&nbsp;<\/code><\/p>\n\n\n\n<p>or<\/p>\n\n\n\n<p><code>Import-Certificate -FilePath &#8220;C:\\Windows\\Temp\\<a href=\"https:\/\/radius.jumpcloud.com\/\">radius.jumpcloud.com<\/a>-2023.crt&#8221; -CertStoreLocation Cert:\\LocalMachine\\Root<\/code><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Wireless Network Configuration<\/h2>\n\n\n\n<ol>\n<li>Right-click the wireless icon in your task bar, and click <strong>Open Network and Sharing Center<\/strong>.<\/li>\n\n\n\n<li>Click <strong>Set up a new connection or network<\/strong>.<\/li>\n\n\n\n<li>Click <strong>Manually connect to a wireless network<\/strong> and click the <strong>Next<\/strong> button.<\/li>\n\n\n\n<li><em>Populate the following:<\/em><br>\n<ul>\n<li>Network name: <em>SSID name configured on the WAP\/Router device<\/em><\/li>\n\n\n\n<li>Security Type: WPA2-Enterprise<\/li>\n\n\n\n<li>Encryption Type: AES<\/li>\n\n\n\n<li>Security Key: <em>&lt;blank&gt;<\/em>\n<ul>\n<li><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Check Connect even if the network is not broadcasting if not broadcasting the RADIUS SSID.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"5\" class=\"is-ordered\">\n<li>Click the <strong>Next<\/strong> button.<\/li>\n\n\n\n<li>On the Successfully added screen, click <strong>Change connection settings<\/strong>.<\/li>\n\n\n\n<li>Click the <strong>Security<\/strong> tab.<\/li>\n\n\n\n<li>Click the Choose a network authentication method: dropdown and select Microsoft: EAP-TTLS.<\/li>\n\n\n\n<li>Click the <strong>Settings<\/strong> button next to authentication method.<\/li>\n\n\n\n<li>Ensure that Unencrypted password (PAP) is chosen for Select a non-EAP method for authentication.<\/li>\n\n\n\n<li>From the Trusted Root Certification Authorities, choose <a href=\"https:\/\/radius.jumpcloud.com\/\">radius.jumpcloud.com<\/a>.<\/li>\n\n\n\n<li>Click the <strong>OK<\/strong> button.<\/li>\n\n\n\n<li>(<em>Optional for not having to supply credentials<\/em>) Back on the Windows Properties window, click the <strong>Advanced settings button.<\/strong><\/li>\n\n\n\n<li>Choose <strong>User authentication<\/strong> from the authentication mode drop-down.<\/li>\n\n\n\n<li>Click <strong>Save credentials<\/strong> which will allow you to input username and password.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Removing Wireless Network Configuration<\/h2>\n\n\n\n<p>If you choose to utilize PEAP for authentication instead of EAP-TTLS\/PAP, or are possibly looking to remove the service, you will be required to delete the existing wireless connection.&nbsp; After the connection has been successfully removed you may again connect to your WAP or Router device using non-EAP-TTLS methods.&nbsp; No additional configuration is required for PEAP with JumpCloud RADIUS, so with the old profile removed the user may connect to networking device normally.<\/p>\n\n\n\n<ol>\n<li>Click the Network icon on the lower right corner of your screen.<\/li>\n\n\n\n<li>Click <strong>Network settings<\/strong>.<\/li>\n\n\n\n<li>Click <strong>Manage Wi-Fi settings<\/strong>.<\/li>\n\n\n\n<li>Under Manage known networks, click the network you want to delete.<\/li>\n\n\n\n<li>Click <strong>Forget<\/strong>. The wireless network profile is deleted.<\/li>\n<\/ol>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Additional configuration is necessary if opting to use EAP-TTLS\/PAP authentication for wireless clients. JumpCloud recommends when possible to utilize PEAP [&hellip;]<\/p>\n","protected":false},"author":204,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2845,2897],"support_tag":[],"coauthors":[2838],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Configure EAP-TTLS\/PAP on Windows for RADIUS - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to configure EAP-TTLS\/PAP RADIUS for Windows.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-windows-for-radius\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Configure EAP-TTLS\/PAP on Windows for RADIUS\" \/>\n<meta property=\"og:description\" content=\"Learn how to configure EAP-TTLS\/PAP RADIUS for Windows.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-windows-for-radius\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-06-12T16:55:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"jenniferklein\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-windows-for-radius\",\"url\":\"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-windows-for-radius\",\"name\":\"Configure EAP-TTLS\/PAP on Windows for RADIUS - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:12:03+00:00\",\"dateModified\":\"2024-06-12T16:55:09+00:00\",\"description\":\"Learn how to configure EAP-TTLS\/PAP RADIUS for Windows.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-windows-for-radius#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-windows-for-radius\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-windows-for-radius#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Configure EAP-TTLS\/PAP on Windows for RADIUS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Configure EAP-TTLS\/PAP on Windows for RADIUS - JumpCloud","description":"Learn how to configure EAP-TTLS\/PAP RADIUS for Windows.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-windows-for-radius","og_locale":"en_US","og_type":"article","og_title":"Configure EAP-TTLS\/PAP on Windows for RADIUS","og_description":"Learn how to configure EAP-TTLS\/PAP RADIUS for Windows.","og_url":"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-windows-for-radius","og_site_name":"JumpCloud","article_modified_time":"2024-06-12T16:55:09+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes","Written by":"jenniferklein"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-windows-for-radius","url":"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-windows-for-radius","name":"Configure EAP-TTLS\/PAP on Windows for RADIUS - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:12:03+00:00","dateModified":"2024-06-12T16:55:09+00:00","description":"Learn how to configure EAP-TTLS\/PAP RADIUS for Windows.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-windows-for-radius#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-windows-for-radius"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-windows-for-radius#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Configure EAP-TTLS\/PAP on Windows for RADIUS"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75232"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/204"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75232\/revisions"}],"predecessor-version":[{"id":111404,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75232\/revisions\/111404"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=75232"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=75232"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=75232"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=75232"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}