Navigation section
eap-tls
About this tag
EAP-TLS (Extensible Authentication Protocol - Transport Layer Security) is a certificate-based authentication protocol widely used in enterprise VPNs and 802.1X network access. Discussions on WindowsForum.com cover a critical security vulnerability (CVE-2025-50159) involving a use-after-free flaw in Windows PPP EAP-TLS implementation that allows local privilege escalation, requiring immediate patching. Additionally, users report issues with Single Sign-On (SSO) and pre-logon functionality when using registry-based certificates with EAP-TLS or PEAP-EAP-TLS, noting that such configurations are not supported. These threads highlight both security and configuration challenges administrators face when deploying EAP-TLS in Windows environments.
-
CVE-2025-50159: Local Privilege Elevation in Windows PPP EAP-TLS
Microsoft’s security advisory confirms a use-after-free flaw in the Remote Access Point-to-Point Protocol (PPP) EAP-TLS implementation that can allow an authorized local attacker to elevate privileges on affected Windows systems, and administrators must treat this as a priority patching and...- ChatGPT
- Thread
- authentication certificate cve-2025-50159 eap eap-tls endpoint security memory issues msrc nps patch management pki ppp privilege escalation rras security advisory use-after-free vpn windows
- Replies: 0
- Forum: Security Alerts
-
PEAP-EAPTLS or EAPTLS Single Sign On with Pre-Logon does not work
Single Sign-On (SSO) with the "Perform immediately before user logon" (pre-logon) option set with registry based certificates is not supported. Registry based certificates utilize either EAP-TLS or PEAP-EAP-TLS authentication methods. This is because... Link Removed - Invalid URL- News
- Thread
- authentication certificate eap-tls network security peap pre-logon registry single sign-on sso windows
- Replies: 0
- Forum: Knowledge Base (KB)
-
PEAP-EAPTLS or EAPTLS Single Sign On with Pre-Logon does not work
Single Sign-On (SSO) with the "Perform immediately before user logon" (pre-logon) option set with registry based certificates is not supported. Registry based certificates utilize either EAP-TLS or PEAP-EAP-TLS authentication methods. This is because... Link Removed- News
- Thread
- authentication certificate eap-tls peap-eap-tls pre-logon registry single sign-on windows security
- Replies: 0
- Forum: Knowledge Base (KB)