The Instant AP is configured in the previous video, the client can see the SSID, but we saw the client does not trust the ClearPass RADIUS Certificate. In this video, I'll explain what certificate is needed, and demo how to request it from Active Directory Certificate Services. After we install the RADIUS certificate on ClearPass, we see the client will connect as expected.
Workshop video overview, schedule, and discussion can be found on the Airheads Community: https://community.arubanetworks.com/community-home/digestviewer/viewthread?GroupId=55&MessageKey=23c87deb-4d5c-487c-9f58-245b9a7f5411&CommunityKey=2477474f-de43-4598-a465-c179d41fdd0b
⏰Timestamps:
00:00 Intro
00:10 Status Quo: unknown_ca message
00:50 Certificate guidelines: Private CA issued RADIUS EAP Certificate
02:30 Create CSR
03:40 Request certificate through ADCS
04:45 Import the private CA Root
05:25 Import RADIUS EAP Certificate
05:50 Export and import to the subscriber node
06:35 Connect the client & check Access Tracker
07:25 Change to user authentication
09:15 How did I get the client certificate enrolled?
11:30 Looking forward to the next video: Role-based access.