Technical Tip: How to set up EAP TLS on workstation and FortiNAC

[sjerry]

Description	This article is to help assist the setup of EAP TLS authentication via FortiNAC.
Scope	FortiNAC, CentOS, nacOS.
Solution	Change network properties to the SSID to the following Microsoft: Smart Card or other certificate. Select Advanced settings. Select Ok and go to settings from the Network Properties window: Make sure the following selections are chosen: Confirm the trusted root CA is selected. In the FortiNAC UI -> Network -> RADIUS -> Local Servers. Make sure OSCP is turned off. Navigate to System -> Certificate Management -> Trusted Certificates. Add the trusted root CA: Run a pcap and filter by Type to see if the supplicant is using EAP TLS. After connecting, the changes should be reflected in the GUI. Related documents: Technical Tip: How to enable OCSP support and OCSP responder errors on FortiNAC Technical Tip: Extracting certificates from SSL/TLS handshake packet capture TLS (certificate)