XCA with Client Cert Auth using Windows NPS / RADIUS

[jaseiler]

Trying to figure out how to get an SSID to use client based certificates that are on laptops which are domain joined.  We are able to connect to the wlan using ldap creds with no issue, but cannot seem to figure out how to configure the XCA to use machine certificates.

We were able to get this running on the older Extreme Wireless IdentiFi controller but cannot seem to locate what’s missing on the XCA.

Thanks

[Schowalter]

krogereschedule

[StephanH]

Hello,

the deployment guide will point you in the right direction:

https://documentation.extremenetworks.com/Extreme%20Campus%20Controller/v5.26/Extreme%20Campus%20Con...

[Schowalter]

If you deploy a certificate-based authentication method, such as Extensible Authentication Protocol-Transport Layer Security (EAP-TLS), Protected Extensible Authentication Protocol-Transport Layer Security (PEAP-TLS), and PEAP-Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAP v2), you must enroll a server certificate to all of your NPSs.