Staff

Technical Tip: How to set up EAP TLS on workstation and FortiNAC

Description

This article is to help assist the setup of EAP TLS authentication via FortiNAC.

Scope

FortiNAC, CentOS, nacOS.

Solution

Change network properties to the SSID to the following Microsoft: Smart Card or other certificate.

Select Advanced settings.

Select Ok and go to settings from the Network Properties window:

Make sure the following selections are chosen:

In the FortiNAC UI -> Network -> RADIUS -> Local Servers.

Navigate to System -> Certificate Management -> Trusted Certificates.

Add the trusted root CA:

Run a pcap and filter by Type to see if the supplicant is using EAP TLS.

After connecting, the changes should be reflected in the GUI.

Related documents:

New Member

Could you share with us how you configure the certificate to populate the user in the NAC, given that you're using machine authentication?

Sign up