Buying certificates from the official Root Certificate Authorities (CA) for all the wireless hosts in a network is expensive, and not necessary. This section shows how to create your own Root CA, and generate and certify X.509 certificates.
Section 6.1.1, “Root CA certificate” describes how to generate a Root Certifying Authority (CA) certificate that can also be used for secure wireless.
Section 6.1.2, “Create the certificates” describes how to generate the server and client certificates that can also be used for secure wireless. Note that the certificates should contain an Enhanced Key Usage (EKU) for Windows XP to accept the certificates.