Skip to main content
GregoryK
New Member
March 4, 2025
Question

Eap-tls entra Ad only.

  • March 4, 2025
  • 2 replies
  • 808 views

So i was wondering if anyone has this working in production. Trying not to go the captive portal route. Can I achieve this with Fortiauthenticator, If yes what scep client are you using for devices to request their certs? Any input would be appreciated. 

2 replies

Jean-Philippe_P
Staff & Editor
Staff & Editor
March 7, 2025

Hello GregoryK, 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

 

Thanks, 

Jean-Philippe - Fortinet Community Team
Jean-Philippe_P
Staff & Editor
Staff & Editor
March 7, 2025

Hello again,

 

Yes, you can achieve EAP-TLS with Entrust AD using FortiAuthenticator. For devices to request their certificates, you can use the Simple Certificate Enrollment Protocol (SCEP) client. FortiAuthenticator acts as a SCEP server, allowing devices to exchange a certificate signing request (CSR) and obtain the signed certificate. Ensure that the SCEP client on the devices is configured to communicate with the FortiAuthenticator's SCEP server.

 

Tell me if it helped you, please :)

Jean-Philippe - Fortinet Community Team
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!