Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
mattw
New Contributor III

FortiAP WLAN Authentication with Certificate (not with RADIUS)

Hi,

Customer has purchased some FortiAPs, to be managed by FortiGate.

They want to authenticate staff onto an SSID if they present a particular machine certificate (signed by their CA), just like you can do with SSL VPN.

I've tried configuring it but it's not working. It looks to me like you have to go via a RADIUS server for certificate authentication on an SSID.

Can anyone confirm my suspicions or point me in the direction of how to make it work?

Thank you!

2 REPLIES 2
johnathan
Staff
Staff

That is correct. You would need a RADIUS server, there is no mechanism to do this directly on the AP or FortiGate itself. 

"Once you eliminate the impossible, whatever remains, no matter how improbable, must be the truth."
mattw
New Contributor III

Thank you for confirming @johnathan.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors