Security

Hello,

I would like to make my Radius/EAP certificate as public because of new adroids but i only have * cert in my domain. I would like to know how can i avoid doing any changes in clients phones or mobiles. I would like them to trust the public certs without any configuration needed in the client side. I also cannot afford onboard licenses or any automation byod solutions.  Is there any guide for that?

More recent versions of Android and IOS essentially made an MDM required to do this at any level of scale or success.  You should purchase an MDM and use that MDM to push out certificate trust and SSID settings.  You can also integrate that MDM with ClearPass.