I have set up an SSID using WPA2 Enterprise-802.1x authentication. We are using AeroHive for our APs. I'm using Microsoft NPS as the Radius server. We are using iOS and Windows 10. I am having issues with the different clients regarding the Radius server
certificate.
I have an Enterprise CA on our network and issued a new certificate for the NPS server and installed the root certificate on the Windows 10 laptop and on the IOS device. Windows 10 will not join the network without unchecking the "validate server certificate". Even if I check to validate and select my root CA it still does not validate.
IOS clients allow you to trust the Radius server's certificate and it works fine but I also have the root CA installed on IOS and it doesn't automatically trust the cert either. I've used this for other apps like the VMware Horizon View client and it checks the certificate and automatically trusts it so I know it should work.
I am thinking about purchasing a commercial cert but I'm not sure it will work since it doesn't work with my Enterprise CA and don't want to buy a certificate only to find it still does not work.
I have an Enterprise CA on our network and issued a new certificate for the NPS server and installed the root certificate on the Windows 10 laptop and on the IOS device. Windows 10 will not join the network without unchecking the "validate server certificate". Even if I check to validate and select my root CA it still does not validate.
IOS clients allow you to trust the Radius server's certificate and it works fine but I also have the root CA installed on IOS and it doesn't automatically trust the cert either. I've used this for other apps like the VMware Horizon View client and it checks the certificate and automatically trusts it so I know it should work.
I am thinking about purchasing a commercial cert but I'm not sure it will work since it doesn't work with my Enterprise CA and don't want to buy a certificate only to find it still does not work.