Oh, and MS NPS RADIUS server will not serve intermediate certificates. Making CA-issued certs useless. Learning about crypto is fun! SecuObs - L'observatoire de la sécurite internet - Site d'informations professionnelles francophone sur la sécurité informatique