CloudPath - manually generate & deploy device certificate

[bicky_budha]

Hi,
Not sure if this is possible.
We have Ruckus vSZ with Cloudpath for on-boarding wireless devices. At the moment all BYOD users goes through the Cloudpath onboarding url >> enter their AD domain credentials which launches the NetworkWizardLoader-xxxx.exe and connects the user to the relevant SSID.

We have few non-domain/Intune managed devices shared by multiple users and would like to connect them to the wireless using the device based certificate. Is there a way on Cloudpath to generate\export the certificate manually which I can install it on the devices so that it connects automatically to the wireless ?

Or please advise of there is a better solution.

Any help on this would be much appreciated, thank you.

[bicky_budha]

thank you, Is there a help guide or knowledge-base article somewhere I can follow ?

[brett_nelson_78]

Here are a couple of screenshots to illustrate... If you need further assistance with this, please open a ticket with Ruckus Support.

[bicky_budha]

thank you Brett, If i generate a certificate based on the existing BYOD  template we use here,  use one of the AD account on Username field, can I apply the same certificate to multiple devices ?

[alex_sharaz]

Well, you'd use the same template but not the same cert you 'd generate a different cert for each entered username

[brett_nelson_78]

You could apply the same cert to different devices, but you would then not be able to uniquely distinguish them.  It is not required that you use an AD account user for the Username field.  That just establishes the username as part of the certificate's common name.  When challenging users in a workflow using an AD authentication server, that is merely authorizing the user to be issued a cert... and that is the extent of AD's role.  Subsequent connections are authenticated with the cert, and not AD at all. (in EAP-TLS use case, anyway...)