Security

 View Only
Expand all | Collapse all

Clearpass EAP-PEAP with public certificate possible?

This thread has been viewed 13 times
  • 1.  Clearpass EAP-PEAP with public certificate possible?

    Posted Jul 19, 2022 09:17 AM

    Hi all,

     

    I have a customer with Aruba Clearpass where they use EAP-PEAP as authentication method to the guest wireless for their BYOD users. To be more specific, patients in a hospital. Solution for authentication is Clearpass Guest.

     

    Is there any best practice for the certificate? On iOS you can trust this easily when connecting, however Android 11 now removed the option to not verify the server certificate which appears as self-signed, however this is a public one from SSL Certificate provider.

     

    Isn't there any option for such case to work with public certificates so that this appears as trusted and everyone can connect seamless?

     

    It's a shame that this can only work smoothly for managed devices on which you can push the certificate. Alternative I can think of is to work with a 'provisioning' page where users have to load certificate first? I'd rather avoid onboard.

     

    Thanks for your advice!



  • 2.  RE: Clearpass EAP-PEAP with public certificate possible?

    Posted Jul 19, 2022 09:36 AM
    Triple Post???