We've found ourselves in a situation where to fix a problem with our 802.1x configuration we need to reissue the certificates in the payload. This particular problem doesn't prevent all our devices from connecting but it will eventually. Being the proactive bunch of nerds we are, we'd like to deploy the fix before it becomes a problem.
The issue we're facing is that the if we just update the existing profile while they're connected to wifi s it disconnects them and they can't get the new profile. We tried issuing a new profile along side the existing wifi profile. But, that screws with the Preferred networks order and still disconnects from the SSID when the original payload is removed.
Can anyone suggest a way to update the Wifi profile en-masse without disconnecting machines that are currently connected in the process?
