Trusted Domain & Radius

[MatthewL]

Does anyone out there have 2 seperate domains that have a trust in place and have WiFi at either site that should allow either domain to connect to it, if so did you have any authentication issues?

 

I've got some issues connecting Android and Apple devices managed on our MDM via this method, if the credetnials are manually entered they work, its down to the trust and certificates if anyone can assist.

[pete]

Does it work on a Windows laptop? If it does (because you've included school01's inhouse sub-CA as trusted at school02 via a GPO and vice versa), have you pushed out the same certs as trusted via MDM at each school?

 

Can androiddevice01.school01.whatever resolve the hostname presented in the certificate? (radius02.school02.whatever, for example)

[MatthewL]

Yes Windows is ok.

 

If I manually authentiate it works but not via the user pushed out via MDM, if I put the MDM credentials in manually its ok, its all to do with certificates but not sure exactly what.