Commercial Cert Doesn't work on NPS Wireless Policy

we're using nps on 2008 r2 authenticate our internal laptops able connect our internal wireless network.  we're using cisco wireless lan controller. 

i'm selecting certificate under policies --> network policies --> private vlan --> constraints (tab) --> authentication methods --> edit on "microsoft:  protected eap (peap)".

if select cert purchsed through thawte, authentication fails on laptop , event id 6273 on nps server.  event says, "authentication failed due user credentials mismatch. either user name provided not map existing user account or password incorrect."

if select cert issued our internal ca, works fine.

i hope provided necessary information.  nps experts out there (not me) have ideas on might causing this?

good point trust, tiger. may need install third party intermediate trust certificate, because many of public cas using method protect root ca. example, purchasing cert digicert customers' exchange servers, have install intermediate cert, available @ website in installation package free download.

---

ace fekay
mvp, mct, mcitp ea, mcts windows 2008 & exchange 2007 & exchange 2010, exchange 2010 enterprise administrator, mcse & mcsa 2003/2000, mcsa messaging 2003
microsoft certified trainer
microsoft mvp - directory services
complete list of technical blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php

this posting provided as-is no warranties or guarantees , confers no rights.

Windows Server  >  Network Infrastructure Servers