---
title: NPS
description: NPS allows you to create and apply network access policies for the authentication and authorization of connection requests throughout the organization.
---

[Skip to content](https://docs.ironchip.com/en/nps#main-content)

- [English](https://docs.ironchip.com/en/nps)
- [Español](https://docs.ironchip.com/nps)

English

Show submenu for translations

[Contac us](https://docs.ironchip.com/en/kb-tickets/new?hsLang=en) [Customer portal](https://support.ironchip.com/tickets?hsLang=en)

![01\_1-ironchip\_logo\_articulación horizontal\_ppal.png\]](https://docs.ironchip.com/hs-fs/hubfs/01_1-ironchip_logo_articulacio%CC%81n%20horizontal_ppal.png?height=40&name=01_1-ironchip_logo_articulacio%CC%81n%20horizontal_ppal.png)

Open main navigation

Close main navigation

- - [English](https://docs.ironchip.com/en/nps)
    - [Español](https://docs.ironchip.com/nps)

  English
  
  Show submenu for translations
- [Contac us](https://docs.ironchip.com/en/kb-tickets/new)
- [Customer portal](https://support.ironchip.com/tickets)
- Contact Us

 Contact Us

 Hello. ¿How can we help you?

- There are no suggestions because the search field is empty.

1. [Help Center](https://docs.ironchip.com/en?hsLang=en)
2. [Identity Platform](https://docs.ironchip.com/en/identity-platform?hsLang=en)
3. [Integrations](https://docs.ironchip.com/en/identity-platform?hsLang=en#integrations)

# NPS

## NPS allows you to create and apply network access policies for the authentication and authorization of connection requests throughout the organization.

> #### Requirements
> 
> - Have a functional Active Directory
> - Have DHCP and DNS services active.
> - Have an MFA application created on the IRONCHIP platform
> 
> #### Implementing NPS on the server
> 
> Install the "Network Policy and Access Services" role by adding roles and features.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/imageedit_7_2537700353-gif-1.gif?width=1040&height=760&name=imageedit_7_2537700353-gif-1.gif)
> 
> #### Create network policy
> 
> To create the network policy, open the network policy server, right-click on network policies within the policies tab, and create a new policy.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/imageedit_5_9921444020-gif-1.gif?width=796&height=387&name=imageedit_5_9921444020-gif-1.gif)
> 
> Give it an identifying name (this name will be used when installing the NPS plugin to determine which policy to protect), and click next.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/Untitled-png-Nov-16-2023-03-20-44-4220-PM.png?width=591&height=594&name=Untitled-png-Nov-16-2023-03-20-44-4220-PM.png)
> 
> In this tab, we will select the user group that this policy will apply to.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/imageedit_11_5533437787-gif-1.gif?width=600&height=576&name=imageedit_11_5533437787-gif-1.gif)
> 
> In the next tab, leave "Access granted" selected.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/imageedit_3_4635213249-gif-1.gif?width=597&height=561&name=imageedit_3_4635213249-gif-1.gif)
> 
> On the next screen, configure the authentication methods you will use. Click Next.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/Untitled%20(1)-png-2.png?width=599&height=604&name=Untitled%20(1)-png-2.png)
> 
> The next screen is for configuring the restriction to automatically deny access if one of these restrictions is not met. Complete it with the options you want. Click Next.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/Untitled%20(2)-png-2.png?width=602&height=607&name=Untitled%20(2)-png-2.png)
> 
> On the next screen, you can add the configuration that will be applied when the policy restrictions are met. Click Next.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/Untitled%20(3)-png-2.png?width=602&height=607&name=Untitled%20(3)-png-2.png)
> 
> The last screen is a summary of the selected configuration. Verify that everything is correct and click Finish.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/Untitled%20(4)-png-2.png?width=600&height=605&name=Untitled%20(4)-png-2.png)
> 
> You have added the network policy, and everything is ready to create the service and install the NPS plugin.
> 
> #### ![](https://docs.ironchip.com/hs-fs/hubfs/imageedit_18_4692885947-gif-1.gif?width=777&height=325&name=imageedit_18_4692885947-gif-1.gif)
> 
> #### Plugin
> 
> To install the plugin, you need the IRONCHIP Windows NPS file, which can be downloaded from the **Add-ons** section on the Ironchip Dashboard.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/imageedit_34_9833622138-png-1.png?width=597&height=868&name=imageedit_34_9833622138-png-1.png)
> 
> After downloading the plugin, proceed to install it.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/imageedit_25_9043902043-png-1.png?width=595&height=1305&name=imageedit_25_9043902043-png-1.png)
> 
> Click **Next**, accept the terms of use on the next screen, and click **Next** again.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/imageedit_26_5444144842-png-1.png?width=607&height=1349&name=imageedit_26_5444144842-png-1.png)
> 
> On the next screen, complete it with the following information:
> 
> - Your Ironchip **host**. If you use our cloud solution, it will be [api.ironchip.com](http://api.ironchip.com). Otherwise, provide your custom **host**.
> - Your company's **API key** obtained when creating the service.
> - The name of the **network policy** you want to protect with Ironchip NPS. In the example, the created policy, IronchipProtected, will be used (if you want to add more than one, put the names separated by a comma and space).
> - Then click **Next** to continue.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/imageedit_28_2661002102-png-1.png?width=597&height=1308&name=imageedit_28_2661002102-png-1.png)
> 
> Once on the next screen and with all the parameters correctly configured, click **Install**.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/imageedit_30_4647350566-png-1.png?width=608&height=1332&name=imageedit_30_4647350566-png-1.png)
> 
> If everything has been correctly configured, and the installation was successful, you will see the following screen. Finally, to complete the installation, click the **Finish** button.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/imageedit_32_7120572722-png-1.png?width=595&height=1308&name=imageedit_32_7120572722-png-1.png)
> 
> You also need to create the application in the IRONCHIP panel that references the MFA application. 
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/Untitled%20(5)-png-2.png?width=622&height=683&name=Untitled%20(5)-png-2.png)
> 
> Finally, add users to that application. (Use the Domain\\User name format)
> 
> #### Check its operation
> 
> To check if everything is configured correctly and working, we will use a third-party tool, NTRadPing.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/Untitled%20(6)-png-2.png?width=597&height=429&name=Untitled%20(6)-png-2.png)
> 
> Download the application from [https://ntradping.apponic.com/](https://ntradping.apponic.com/)
> 
> Before entering the application, we will have to create a radius server to perform the test. To do this, open the network policy server, go to RADIUS clients and servers, create a new one by right-clicking on RADIUS clients.
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/imageedit_39_6018460185-gif-2.gif?width=603&height=343&name=imageedit_39_6018460185-gif-2.gif)
> 
> In the panel that opens, you have to enter the following data:
> 
> 1. Identifying name for RADIUS
> 2. IP of the server where it will be installed
> 3. A secret key for RADIUS
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/Untitled%20(7)-png.png?width=480&height=612&name=Untitled%20(7)-png.png)
> 
> Now, if we open NTRadPing and fill in the fields it asks us for (Remember to restart the service to apply the settings).
> 
> 1. IP of your server
> 2. Port it will connect to (default is 1645)
> 3. Time before aborting and how many times it will execute
> 4. User's password
> 5. RADIUS server key
> 6. User to be used
> 
> ![](https://docs.ironchip.com/hs-fs/hubfs/Untitled%20(8)-png-1.png?width=693&height=439&name=Untitled%20(8)-png-1.png)
> 
> #### Video tutorial
> 
>  
> 
> <iframe data-hsv-src="https://play.hubspotvideo.com/v/7745202/id/145774813226" referrerpolicy="origin" sandbox="allow-forms allow-scripts allow-same-origin allow-popups" allow="autoplay; fullscreen;" style="position: absolute !important; width: 100% !important; height: 100% !important; left: 0; top: 0; border: 0 none; pointer-events: initial" title="HubSpot Video" loading="lazy" data-hsv-id="145774813226" data-hsv-style="" data-hsv-width="688" data-hsv-height="516" data-hsv-autoplay="false" data-hsv-loop="false" data-hsv-muted="false" data-hsv-hidden-controls="false" data-hsv-full-width="false"></iframe>
> 
> 
> 
> 
> 
> 
> 
> 
> 
> #### Installation on Windows Server 2008 and Windows Server 2012
> 
> Before proceeding with the installation of the Ironchip Plugins NPS, the following installations and configurations are required:
> 
> **JDK and .NET (our team will provide these plug-ins), we also need to make a change to the Ironchip certificate format to be accepted.**
> 
> **JDK Installation**
> 
> Open the program and click on **Next**.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step1-ws2008-nps.png?width=40pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step1-ws2008-nps.png?width=40pc)
> 
> On the next screen, we accept the terms of the contract and click **Next** again.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step2-ws2008-nps.png?width=40pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step2-ws2008-nps.png?width=40pc)
> 
> In the window that appears below you have the possibility to customise the installation, however, the default configuration is enough for the subsequent installation, so in this case, it would only be necessary to click on **Next**.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step3-ws2008-nps.png?width=40pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step3-ws2008-nps.png?width=40pc)
> 
> When you get to this screen, just click on **Install**.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step4-ws2008-nps.png?width=40pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step4-ws2008-nps.png?width=40pc)
> 
> If everything has gone correctly, you will see the following screen and click **Finish**.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step5-ws2008-nps.png?width=40pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step5-ws2008-nps.png?width=40pc)
> 
> **.NET installation**
> 
> **Note**: This step is optional on *Windows Server 2012*.
> 
> When you run the program on the next screen, you must accept the terms and conditions and click on **Install**.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step1-punto-net.png?width=40pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step1-punto-net.png?width=40pc)
> 
> Once the installation is complete, you will find this window and click **Finish.**
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/punto-net-installed.png?width=40pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/punto-net-installed.png?width=40pc)
> 
> **Change of the format of the Ironchip Certificate**
> 
> The first thing to do is to enter the [api.ironchip.com](http://api.ironchip.com/) in your browser (in this case Google Chrome was used), but this can be done from the browser of your choice.
> 
> Then in the section where it indicates: **“Not secure,”** we click and we will see the option **“The certificate is not valid”**, we click there.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step2-error-certificado-invalid.png?width=40pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step2-error-certificado-invalid.png?width=40pc)
> 
> On the next screen go to Details, and click on the **Copy to File…** option.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step3-error-certificado-invalid.png?width=30pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step3-error-certificado-invalid.png?width=30pc)
> 
> In the next window, we choose the third option and select the checkbox **Include all certificates in the chain if possible**.
> 
> Then click on **Next**
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/all-certificated.png?width=30pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/all-certificated.png?width=30pc)
> 
> A new window will open where you click on **Next**.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step4-error-certificado-invalid.png?width=30pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step4-error-certificado-invalid.png?width=30pc)
> 
> On the next screen, we choose the path where we want to export the certificate and the name we are going to reassign it. Once this process has been carried out, click on **Next**
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step6-error-certificado-invalid.png?width=30pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step6-error-certificado-invalid.png?width=30pc)
> 
> The Export process will be carried out and then you will see the following screen and press **Finish.**
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step7-error-certificado-invalid.png?width=30pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step7-error-certificado-invalid.png?width=30pc)
> 
> At this point in the process, we already have the certificate in the correct format on our computer, so we proceed to import it.
> 
> In the program search engine we look for: **mmc**. Click on the program.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step1-import-certificate.png?width=30pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step1-import-certificate.png?width=30pc)
> 
> In the next window, we choose **File** and then **Add/Remove Snap-ins**
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step2-import-certificate.png?width=30pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step2-import-certificate.png?width=30pc)
> 
> The following window will appear, select **Certificates** and click on **Add**.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step3-import-certificate.png?width=30pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step3-import-certificate.png?width=30pc)
> 
> In the next window, choose the **Computer account** option, click **Next**
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step4-import-certificate.png?width=30pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step4-import-certificate.png?width=30pc)
> 
> Then choose the first option shown and click on **Finish**.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step5-import-certificate.png?width=30pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step5-import-certificate.png?width=30pc)
> 
> Now in the Console Root folder (local) Certificates will be added, click on them, and the following window will be displayed, there we choose the option **Trusted Root Certification Authorities**.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step6-import-certificate.png?width=30pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step6-import-certificate.png?width=30pc)
> 
> Expand the Certificates folder inside the previous folder and then in the rightmost tab of the screen choose **More Actions**, then **All Tasks**, and then **Import**.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step7-import-certificate.png?width=30pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step7-import-certificate.png?width=30pc)
> 
> A window will open where we must choose the location where we have previously exported the certificate.
> 
> **Note:** it is important when choosing the certificate to select the correct extension, so it is recommended to choose: **AllFiles( \* . \*)**.
> 
> Then click on the option **Next**.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step8-import-certificate.png?width=30pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step8-import-certificate.png?width=30pc)
> 
> In the next window, click on **Next** again.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step9-import-certificate.png?width=30pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step9-import-certificate.png?width=30pc)
> 
> A window with the import summary will be displayed, just click on **Finish**.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step10-import-certificate.png?width=30pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step10-import-certificate.png?width=30pc)
> 
> If everything went correctly, the next window will be a Successful Import screen, click **OK**.
> 
> [![Plugin](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step11-import-certificate.png?width=30pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/step11-import-certificate.png?width=30pc)
> 
> #### Test NPS Plugin
> 
> 1. Access the **Event Viewer** to view the IronChip NPS plugin logs.
>    
>    [![eventViewer](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/eventViewer.png?width=60pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/eventViewer.png?width=60pc)
> 2. If everything is OK, you should see **NPSP Ironchip Plugin** in the list of applications and services logs. Click on it, and if the plugin is installed you should see **Ironchip NPS plugin initialized successfully.** in the logs as you can see here:
>    
>    [![installed](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/nps-Plugin-Instalado.png?width=40pc)](https://helpcenter.ironchip.com/images/location-identity-platform/integrations/rdp/nps-Plugin-Instalado.png?width=40pc)
>    
>    **Note:** If you get the message “**Unable to load IronChip license key.**” Check that it is the correct license and try again. If the problem persists, contact IronChip support for assistance.

### Troubleshooting

> #### “User XXX is not authenticated in service XXX. Please, try again.
> 
> The user is not authenticated, or authentication has not been valid. Just try again authentication in same page.
> 
> #### “Unable to load IronChip license key. Check that it is the correct license and try again. If problem persist contact IronChip support for help.”
> 
> This error means that the license format is not valid. Please, contact [info@ironchip.net](mailto:info@ironchip.net) with the error, and we will validate the license key used and provide a valid one if not valid.
> 
> #### “Event ID 4402: There is no domain controller available for the domain”
> 
> You do not need to rename your domain or back rev. You was able to resolve this issue by adding the following reg key to force authentication to use DNS name, instead of the NetBIOS name:
> 
> - New string value (REG\_SZ): Default Domain.
> - Data: example.loc (or example.domain.loc).
> 
> #### “The API-Key provided is not valid. Please, contact IronChip support and send logs for assistance.”
> 
> This error means that the license has the correct format, but is old or invalid. Please, contact [info@ironchip.net](mailto:info@ironchip.net) with the error, and we will validate the license key used and provide a valid one if not valid.
> 
> #### “Ironchip has failed. Sorry. Contact support to allow us to solve the problem.”
> 
> This error means that some strange thing has happened. If you see this error, contact IronChip support mail, [info@ironchip.net](mailto:info@ironchip.net), providing error log printed in Event Viewer IronChip MFA logs.

- [Identity Platform](https://docs.ironchip.com/en/identity-platform?hsLang=en#main-content)

    - [User Guide](https://docs.ironchip.com/en/identity-platform?hsLang=en#user-guide)
    - [Administrator Guide](https://docs.ironchip.com/en/identity-platform?hsLang=en#administrator-guide)
    - [Get Started](https://docs.ironchip.com/en/identity-platform?hsLang=en#get-started)
    - [Integration protocols](https://docs.ironchip.com/en/identity-platform?hsLang=en#integration-protocols)
    - [Integrations](https://docs.ironchip.com/en/identity-platform?hsLang=en#integrations)
    - [SLA](https://docs.ironchip.com/en/identity-platform?hsLang=en#sla)
- [Fraud Detection platform](https://docs.ironchip.com/en/fraud-detection-platform?hsLang=en#main-content)

    - [Guides](https://docs.ironchip.com/en/fraud-detection-platform?hsLang=en#guides)
    - [For developers](https://docs.ironchip.com/en/fraud-detection-platform?hsLang=en#for-developers)
    - [SDK](https://docs.ironchip.com/en/fraud-detection-platform?hsLang=en#sdk)
- [Security & SLA](https://docs.ironchip.com/en/security-sla?hsLang=en)
- [FAQ's](https://docs.ironchip.com/en/faqs?hsLang=en#main-content)

    - [General](https://docs.ironchip.com/en/faqs?hsLang=en#general)
    - [Identity platform](https://docs.ironchip.com/en/faqs?hsLang=en#identity-platform)

[![Ironchip](https://docs.ironchip.com/hs-fs/hubfs/logohubspot.png?width=300&height=74&name=logohubspot.png "Ironchip")](http://www.ironchip.com)

Help center ironchip.net

Copyright © 2026, Ironchip Telco S.L.

```json
{
  "@context" : "https://schema.org",
  "@type" : "VideoObject",
  "contentUrl" : "https://7745202.fs1.hubspotusercontent-na1.net/hubfs/7745202/NPSTutorial-1.mp4",
  "dateModified" : "2026-02-10T08:09:05.043Z",
  "duration" : "PT5M25.973S",
  "height" : 770,
  "name" : "NPSTutorial-1",
  "thumbnailUrl" : "https://7745202.fs1.hubspotusercontent-na1.net/hubfs/7745202/NPSTutorial-1.mp4/medium.jpg",
  "uploadDate" : "2023-11-16T15:27:18.544Z",
  "width" : 1026
}
```