using certificate to authenticate the user to the wi-fi

Question

Hi,
We have Ruckus Virtual SmartZone. At the moment user's connect to the WiFi
using the domain username & password. We would like to test the certificate
based wifi authentication.

We
have Microsoft Certificate Authority. NPS has been installed on Domain
Controller. In NPS I have created connection request policy with the condition
NAS Port Type Wirelesses IEEE 802.11 Or Wireless – Other.

Network
Policy has been created with the condition NAS Port Type Wirelesses IEEE 802.11
Or Wireless – Other, EAP Types as Microsoft Smart Card or other Certificates
>> Selected the domain controller certificate that is installed on that
server.

Now
I guess I need to get a certificate for the end user which I will be asking the
end user to install it on their devices, do I create this certificate CSR from
the Ruckus\System\Certificates\CSR and submit the CSR request via web enrolment
to the Microsoft CA where I have to paste the CSR and select the Certificate
Template (not sure which template) ?

Any
help on this will be much appreciated, thank you.

Bicky

peter_riederer_ · Answer

for our internal clients we get the cert for wifi from our ca via auto enrollment policy.dont know which way is here the best for external devices.but anyway its much too complicated in my opinion to handle that. hence i wouldnt even try this out 🙂

bicky_budha · Answer

We are not switching from AD to the Cert-based. I just want to test the certificate based authentication to get my hands-on, kind of trying to learn and see how it works.

peter_riederer_ · Answer

why you want to switch from AD to Cert-based? AD is much easier to handle. Installing a Cert on an iPhone or Android is always difficult. and if the employe leaves the company you just can disable the account and he/she cannot use the wifi anymore. with certs its much more difficult.