topic RE: Can NAC push certificate to device in ExtremeCloud IQ- Site Engine Management Center

Can NAC push certificate to device

Andre_Brits_Kan — Mon, 24 Apr 2017 00:58:00 GMT

Hi All

Can the NAC push a certificate to a device, to use for authentication?

Thx

RE: Can NAC push certificate to device

Mike_Thomas — Mon, 24 Apr 2017 16:08:00 GMT

Is this a new appliance being added, or a replacement one?

RE: Can NAC push certificate to device

Andre_Brits_Kan — Mon, 24 Apr 2017 17:00:00 GMT

Hi Mike, not sure on your question.
This a a new NAC appliance that is being deployed.

The client would like to use EAP TLS with Certificates to authentication.
For windows Laptops, I can join the domain on the LAN and have the authentication Certificate pushed/installed on the laptop from a group policy that applies to the Laptop.

The problem occurs with the Mobile devices, when they connect to the Wireless they do not have the Authentication Cert installed and also does not trust the CA.

RE: Can NAC push certificate to device

Mike_Thomas — Mon, 24 Apr 2017 17:24:00 GMT

Thanks Andre,
So I am uncertain, is there an existing NAC that had a certificate on it, or is this a new install?

RE: Can NAC push certificate to device

Andre_Brits_Kan — Mon, 24 Apr 2017 17:38:00 GMT

This will be a new installation

RE: Can NAC push certificate to device

Mike_Thomas — Mon, 24 Apr 2017 17:46:00 GMT

Okay, A replaced NAC could have the certificate enforced down to the device, but a new NAC will need to go through the process outlined in this document to install the certificates on a per-nac basis. Since your using 802.1x, you will need to go through the CSR process as well.

https://gtacknowledge.extremenetworks.com/articles/How_To/How-To-Update-NAC-Internal-Communications-...

RE: Can NAC push certificate to device

Andre_Brits_Kan — Tue, 25 Apr 2017 00:20:00 GMT

Hi James

Thank you, yes my questions was related to the client device certificate.

Thx

RE: Can NAC push certificate to device

Ryan_Yacobucci — Tue, 25 Apr 2017 21:08:00 GMT

NAC does not have the ability to install certificates or provision 802.1x supplicants with the correct authentication configuration on end systems.

Thanks
-Ryan