Security

Im using Clearpass as my Radius for windows domain clients, and also IP phones, handhelds etc. If I create a self signed cert in AD, do I need to push that cert to my domain clients in AD/GPO? 

 

Same for 3rd party certs - If i get a trusted 3rd party, do I need to push it to domain clients through GPO? 

 

I want to avoid the accept certificate popups

For the self-signed certificate, you will need to push down the certificate and also configure the supplicant via Group Policy.

If you use a publicly signed cert, you just need to configure the supplicant via group policy.