Security

Hi, would like to check if i am migrating from ACS to clearpass, do i need to generate a new cert for eap-tls authentication or i can use the existing cert? Does the end points need to be reconfigured?

If you have the private key for the server certificate, you can import it along with the CA, to ClearPass as the RADIUS cert.

If your client certs are issued by a different CA, you will need to import that CA cert as well.

You should not have to reconfigure your clients.