Hi all. Long-time browser of the forums but first-time posting!
Recently updated WiFi infrastructure around the school, installing Aruba APs. At the time, it was decided to set the SSIDs up as WPA-2 Personal, and give the passphrase to staff and sixth-form students for BYOD.
This is far from ideal from a security perspective and want to implement RADIUS so we can control who can connect to the WiFi via AD security groups.
I’ve been looking into it and there is a lot of information available online with differing suggestions on how to configure this. I am going with Windows NPS > RADIUS server for 802.1 X > EAP-MSCHA v2, as this seems to be a common setup?
The part I am struggling to understand is whether this setup requires certificates to be installed on the user’s device? I’m just looking for user authentication via AD credentials without certificate, if that is possible?
Any suggestions / help would be greatly appreciated. Thanks.
