EAP-TLS Computer-based auth with freeRADIUS and pfSense

[jhart_hv]

Hi all, I was wondering if anyone had any experience setting up a configuration in Jamf for computer cert auth using freeRADIUS. I am in the planning stages of moving our Macs over to cert based wireless auth and have a few questions regarding the deployment to Macs.

1. Should I be using the X.509 Certificate payload for the computer certs created by freeRADIUS?
2. If not, will the AD Certificate payload work to fulfill this?

I will be using pfSense to host the freeRADIUS server, and we are using Ubiquiti APs.

[Stefan09]

Hey jhart_hv

I'm planing to do exactly the same as you described in your question, new wifi on Ubiquiti AP with cert auth based on freeRadius hosted by pfSense. Did you managed to make it work? If so, do you have any useful links / instructions?

cheers!

[wlew]

Hi @Stefan09 and @jhart_hv 

+1 on this. Were either of you successful in getting this done? I'm in the early stages on getting this to work. The freeRadius config is where i'm getting stumped.