Ruckus and Radius (NPS)

[Dragon]

We have been issuing DPSK since we have had the Ruckus system but I am looking at stream lining the process of getting user devices onto the wireless network.

 

I have got as far as installing a windows NPS server, but looking at non domain clients I was wondering if using a 3rd party certificate (as deploying a self certificate could be an issue) was a good idea. Domain joined computers aren't really an issue with the wifi at all, as we use a PSK that only we know. Where as BYOD clients use the DPSK. I have set up a server with NPS and got it working with the Ruckus ZD. By creating a manual connection on a windows 7 client and unticking "Validate server certificate" the user can enter their network credentials and get access to the wifi. I was hoping with a 3rd party certificate on the NPS server from the likes of Geotrust that the certificate can be validated but it doesn't. I don't really want to distribute certificates for users to install as I want to make it as easy as possible for staff and students to get onto the wireless network. At the same time (as we start to look at new firewalls) I am hoping to be able to pass user info using radius accounting to the firewall so that user authentication with the firewall is seemless too.

 

Has anyone else successfully achieved this?

[Dragon]

No one?