Can NAC push certificate to device

[Andre_Brits_Kan]

Hi All

Can the NAC push a certificate to a device, to use for authentication?

Thx

[Ryan_Yacobucci]

NAC does not have the ability to install certificates or provision 802.1x supplicants with the correct authentication configuration on end systems.

Thanks
-Ryan

[Andre_Brits_Kan]

Hi James

Thank you, yes my questions was related to the client device certificate.

Thx

[James_A]

I think Andre is asking about client devices, not NAC devices managed by EMC. The answer is no, you'll need a third-party product like CloudPath, SecureW2 or an MDM that supports SCEP to push out a profile with the RADIUS cert and request a client cert.

[Mike_Thomas]

Okay, A replaced NAC could have the certificate enforced down to the device, but a new NAC will need to go through the process outlined in this document to install the certificates on a per-nac basis. Since your using 802.1x, you will need to go through the CSR process as well.

https://gtacknowledge.extremenetworks.com/articles/How_To/How-To-Update-NAC-Internal-Communications-...