Overview of Network Policy Server
As a RADIUS server, NPS performs authentication and authorization of network connection attempts. NPS authenticates users and devices by verifying their Active Directory credentials.
RADIUS clients are network access servers such as wireless access points (APs), 802.1X-capable switches, virtual private network (VPN) servers, and dial-up servers because they use the RADIUS protocol to communicate with RADIUS servers, such as NPS servers.
You can configure an NPS as a RADIUS server that integrates with the Cloudpath Enrollment System (ES). Cloudpath can be used as a private CA for certificate deployments using either PEAP-TLS or EAP-TLS authentication. Cloudpath provides certificates to your NPS server acting as a RADIUS server, and client certificates to your client computers and users. NPS servers are logically connected to your network so that they can receive incoming access requests directly from wireless APs or wireless controllers.
This guide describes how to configure a Microsoft 2008 NPS as a RADIUS server for use with the Cloudpath in an 802.11 wireless network with EAP-TLS authentication.