r/ArubaNetworks

I am confused about how to set up EAP-TLS authentication for Android and IOS phones, using Microsoft NPS.

We already have EAP-TLS certificate authentication for our domain computers. So basically:

\-          The computers get a certificate from the CA

\-          The computers are in an AD-group

\-          On the Windows NPS server, there is a policy granting access, using the AD-Group as Matching Condition

 

That works like it should. Now, we have the task to also implement this for android an ios phones tool. We already managed to roll out certificates via Intune, however I’m not sure how to setup the NPS site for that. As these are no Domain Joined devices, they are in no group.

How would a have to set up a policy in NPS for these phones?

Does anyone have this robot in their logistics center? We're experiencing a de-auth-from-client error in an environment with Aruba access points?