FortiAP WLAN Authentication with Certificate (not with RADIUS)

[mattw]

Hi,

Customer has purchased some FortiAPs, to be managed by FortiGate.

They want to authenticate staff onto an SSID if they present a particular machine certificate (signed by their CA), just like you can do with SSL VPN.

I've tried configuring it but it's not working. It looks to me like you have to go via a RADIUS server for certificate authentication on an SSID.

Can anyone confirm my suspicions or point me in the direction of how to make it work?

Thank you!

[johnathan]

That is correct. You would need a RADIUS server, there is no mechanism to do this directly on the AP or FortiGate itself. 

[mattw]

Thank you for confirming @johnathan.