none
Considerations when changing the NPS server name RRS feed

  • Question

  • Hi,

    I'm in bit of trouble finding the impact of changing the hostname of a NPS server in our cooperate network which is being utilized for Wi-Fi authentication.

    If there is any impact of doing such a change I would like to know the correct steps to change the hostname.

    We have an internal CA server & I can see there are 2 certificates (below) on NPS server's certificate store issued by the internal CA for Client & Server authentication purposes.

    1. NPS Server
    2. RAS & IAS Server

    Many Thanks in advance,

    Asiri

    Tuesday, September 3, 2019 8:53 AM

Answers

  • Hi ,

    If you change an NPS name, you need to reconfigure portions of your NPS deployment:

    1.If the NPS is a member of a remote RADIUS server group and the group is configured with computer names rather than IP addresses, reconfigure the remote RADIUS server group with the new NPS name.

    2.If certificate-based authentication methods are deployed at the NPS, the name change invalidates the server certificate. You can request a new certificate from the certification authority (CA) administrator or, if the computer is a domain member computer and you autoenroll certificates to domain members, you can refresh Group Policy to obtain a new certificate through autoenrollment. To refresh Group Policy:

    a. Open Command Prompt or Windows PowerShell.

    b. Type gpupdate, and then press ENTER.

    3.After you have a new server certificate, request that the CA administrator revoke the old certificate.

    4.After the old certificate expires, NPS automatically begins using the new certificate.

    For more details , please refer to the following article:

    Verify Configuration After Renaming an NPS

    Best Regards,

    Candy


    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com   


    Wednesday, September 4, 2019 4:13 AM
    Moderator

All replies

  • Hi ,

    If you change an NPS name, you need to reconfigure portions of your NPS deployment:

    1.If the NPS is a member of a remote RADIUS server group and the group is configured with computer names rather than IP addresses, reconfigure the remote RADIUS server group with the new NPS name.

    2.If certificate-based authentication methods are deployed at the NPS, the name change invalidates the server certificate. You can request a new certificate from the certification authority (CA) administrator or, if the computer is a domain member computer and you autoenroll certificates to domain members, you can refresh Group Policy to obtain a new certificate through autoenrollment. To refresh Group Policy:

    a. Open Command Prompt or Windows PowerShell.

    b. Type gpupdate, and then press ENTER.

    3.After you have a new server certificate, request that the CA administrator revoke the old certificate.

    4.After the old certificate expires, NPS automatically begins using the new certificate.

    For more details , please refer to the following article:

    Verify Configuration After Renaming an NPS

    Best Regards,

    Candy


    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com   


    Wednesday, September 4, 2019 4:13 AM
    Moderator
  • Hi Asiri,

    Just want to confirm the current situations.

    Please feel free to let us know if you need further assistance.                   

    Best Regards,

    Candy


    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com   

    Thursday, September 5, 2019 6:20 AM
    Moderator
  • Hi ,

    You could mark the useful reply as answer if you want to end this thread up.

    If there is anything else we can do for you, please feel free to post in the forum.

    Best Regards,

    Candy


    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com   

    Monday, September 9, 2019 1:45 AM
    Moderator
  • Hi

    Yes. This helped me to carry on the change & NPS is working as expected after name change.

    Thanks Much!


    • Edited by Asiri_Kai Wednesday, September 11, 2019 4:19 AM
    Wednesday, September 11, 2019 4:19 AM
  • Hi ,

    I am pleased to know that the information is helpful to you.

    Have a nice day!

    Best Regards,

    Candy


    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com   

    Wednesday, September 11, 2019 4:38 AM
    Moderator