Skip to main content
GauravPandya
GauravPandya
Explorer
July 16, 2025
Question

Certificate-based authentication for wifi users

  • July 16, 2025
  • 1 reply
  • 360 views

We have fortigate firewalls & EMS server for Forticlient management. We are using several FortiAPs. We want to use certificate-based authentication for wifi users. I know we can achieve it by using EAP-TLS 802.1x and radius server. Is there any way we can use EMS server for certificate-based authentication for wifi users? If so please share document for the same.
Thanks in advance.

1 reply

AEK
SuperUser
AEK
SuperUser
July 17, 2025

As per my understanding, you can use NAC policy on FGT with ZTNA tags, knowing that the FortiClient already use certificate for registration and telemetry.

Actually FortiClient has nothing to do with WiFi authentication, so I know this suggestion is not WiFi authentication, but it is NAC control and is based on client certificate.

AEK
Terms & ConditionsAccessibility statement