3Com 5500-SI Configuration Manual page 635

k Select the appropriate certificate and click OK. There should be at least one
certificate. This is the certificate that has been created during the installation of
the Certification Authority Service.
Windows may ask if you wish to view the Help topic for EAP. Select No if you want
to continue with the installation.
l Click Finish.
IFor EAP-TLS to work correctly, it is important that there is only one policy
configured in IAS.
7 Enable Remote Access Login for Users.
a Select Programs > Administrative Tools > Active Directory Users and
Computers. Double-click the user account for which you want to enable
authentication.
b Select the Dial-in tab from the client Properties window. Select Allow access.
Click OK.
c Click OK to confirm.
8 Configure the Switch 5500 for RADUIS access and client authentication see
Chapter 21 "802.1x Configuration".
9 Generate a certificate by requesting a certificate from the Certification Authority.
The certificate is used to authorize the RADIUS client with the RADIUS Server.
a On the RADIUS server, open Internet Explorer and enter the URL
http://localhost/certsrv
Setting Up A RADIUS Server 635