Posted on 05-06-2016 12:26 PM
We are looking to implement EAP-TLS authentication for our wireless environment and want to know if Casper integrates with a Microsoft PKI/CA. We need to know if it is possible for Casper to automatically obtain a user certificate from the Microsoft PKI/CA and then push the certificate out to MAC devices. Additionally, does Casper have a built-in CA that can be utilized to push user certificates to MAC devices? If the built-in CA to Casper is utilized is it possible to configure it so that the user certificate private key is not exportable?
Posted on 05-06-2016 01:49 PM
Edit: nevermind, I just noticed you are using user certs for wireless, which I have no experience in. In any case, you will want your own CA to issue those certs.
Posted on 05-06-2016 04:18 PM
Check out this article.
https://support.apple.com/en-us/HT204602
We just went to this approach. Mac clients were easier than wintels.
We also used JAMF Pro Services and had it done in less than 2 1/2 hours.
Posted on 05-06-2016 11:25 PM
@Ken.Bailey I have a post that might help some alongside what @lawrence.stegall posted.