Wireless Authentication using certificate

[Silver]

Dear All,

Anyone can advise me how we can configure  wireless using Fortiauthenticator with another vendor wireless controller to setting up a wireless network with certificate. I would like all my users on my lan to connect to the wireless network using a certificate. Anyone can guide me how to do it. And please i would like to know exactly how the certificate works, do we need to attach each certificate with a user or we can use only one user certificate for all the machine's.

Thanks

[Silver]

Hi,

Anyone can help plz 

Thanks

[seadave]

This might give you some hints.  I think what you are trying to do is essentially enabling 802.1X.  This is for Ruckus, but having guest user domain username and password so they are identified to the FG.

http://travelingpacket.com/2015/07/23/fortigate-radius-sso-with-ruckus-802-1x-logins-using-nps/

Using these instructions you would replace Windows NPS with a FAC I think.  We have yet to test.  If you don't want users to enter their credentials, you could use a combination of MACs and Certs I think.  More info:

http://docs.fortinet.com/uploaded/files/1092/fortigate-authentication.pdf