Information Technology Reference
In-Depth Information
You can export the configuration of an NPS server, including policies, templates, NAP con-
figuration, and client information. The exported file includes the shared secrets used between
RADIUS clients and the RADIUS server, or between the RADIUS server and remote RADIUS
servers. This is sensitive information and should be stored in a secure location except when
actually being used to recover a server configuration.
EXAM TIP
Let me emphasize this, since it's very likely to show up on the exam. the exported configu-
ration of an NpS server contains sensitive information. how you use the export, and how
you store it, are significant security concerns.
NOTE
RADIUS ACCOUNTING
If RADIUS accounting is being logged to a SQL Server database, the exported NPS con-
figuration does not include the SQL Server logging information. After importing this to
another server, you must manually reconfigure SQL Server logging.
To export the NPS configuration, follow these steps:
Open the Network Policy Server console.
1.
2.
Right-click NPS (Local) at the very top of the console tree.
3.
Select Export Configuration from the menu.
Select I Am Aware That I Am Exporting All Shared Secrets and then click OK.
4.
5.
Select the location and file name for saving the XML file and click OK.
You can export the NPS server configuration by using the Export-NpsConfiguration
cmdlet; for example:
Export-NpsConfiguraton -Path "C:\Temp\NPSConfig.xml"
EXAM TIP
While netsh has been deprecated, it's still possible it will show up on the exam. the command
to export the NpS server configuration using netsh is:
netsh nps export filename=c:\temp\npsconfig.xml exportpsk=yes
You can import the configuration from an NPS configuration export. This import includes
all policies, shared secrets, templates, RADIUS clients, and remote RADIUS server information.
Follow these steps to import the NPS configuration:
Open the Network Policy Server console.
1.
