802.1x Server Setup (Windows 2000 Server) 
This section describes using Microsoft Internet Authentication Server as the RADIUS server, 
since it is the most common RADIUS server available that supports the EAP-TLS authentication 
method.  
The following services on the Windows 2000 Domain Controller (PDC) are also required. 
•
 
dhcpd  
•
 
dns  
•
 
rras 
•
 
webserver (IIS)  
•
 
RADIUS Server (Internet Authentication Service)  
•
 
Certificate Authority 
Windows 2000 Domain Controller Setup 
1.
 
Run dcpromo.exe from the command prompt.  
2.
 
Follow all of the default prompts, ensure that DNS is installed and enabled during 
installation.  
Services Installation 
1.
 
Select the Control Panel > Add/Remove Programs.  
2.
 
Click Add/Remove Windows Components from the left side.  
3.
 
Ensure that the following components are selected. 
•
 
Certificate Services—After enabling this, you will see a warning that the computer 
cannot be renamed and joined after installing certificate services. Select Yes to 
select certificate services and continue 
•
 
World Wide Web Server—Select World Wide Web Server on the Internet 
Information Services (IIS) component. 
•
 
From the Networking Services category, select Dynamic Host Configuration 
Protocol (DHCP), and Internet Authentication Service (DNS should already be 
selected and installed). 
122