Hi,

We are currently attempting to deploy some new iPAQ 210 mobile devices running Windows Mobile 6 Classic, and would like to setup secure wireless to the corporate WLAN.  We have 802.1x currently in place with a Windows Server 2008 Enterprise Root CA.  We are rather new to the PDA wireless encryption technology, and would like the devices to be on the WLAN without prompting the users for authentication (instead have a power on password).  We have successfully implemented PEAP technology on them, but would like to issue a device certificate to them so they will not prompt for authentication if possible.  The PEAP implementation seemed to be a little buggy since it would sometimes authenticate and sometimes would not, which is a problem for the end users.  After two or three tries it would always work, but it did not seem to be a reliable solution.  Also, after a soft reset the devices would prompt for authentication once again.  Notebook users do not have any problem authenticating to the WLAN so the infrastructure seems to be sound.  Using Certificates, the devices prompt for a username and domain, but no password.  They are also prompting for this it seems at random stages after powering them off and on or after a soft reset.

Would someone with a little experience with this technology care to make some recommendations in regards to the best way to achieve this?  Would configuring a new SSID and WPA-PSK be a better solution for the very limited number of PDA that will be participating on the wireless network (right now 2, soon to be perhaps close to 10 in a month or two)?

Thank you,
Jeff