Ivan Macek's questions

As I understood EAP-TTLS and PEAP share same level of security when implemented in wireless networks. Both only provide server side authentication via certificate.

The drawback of EAP-TTLS can be non native support in Microsoft Windows so every user has to install additional software.

The benefit of EAP-TTLS can be support for less secure authentication mechanisms (PAP, CHAP, MS-CHAP) but why would you need them in modern and properly secure wireless system?

What are you opinions? Why should I implement EAP-TTLS instead of PEAP? Let's say that I have most Windows users, medium Linux users and least iOS, OSX users.

I'm trying to connect Windows 7 machine to my wireless network secured with WPA2-Enterprise PEAP. PEAP uses server authentication so I have created root CA named FesbCA on my Windows server 2008 R2 and with it I signed root.fesb.hr certificate which is used for server authentication.

On Windows 7 client machine root CA FesbCA is imported to Trusted Root Certification Authorities and that should make root.fesb.hr valid certificate.

Than why do I still get the certificate error when trying to connect to wireless network?

Here is reference image with error.