Is that for in premises AD? Or Entra ID with Intune?
Client certificates that follow the standard client certificates template in AD Certificate Services should be fine.
Here is a video on how to set it up from scratch with ADCS. And here is a video just on the ADCS and configuring the GPO. Please double-check with your security team as they may have guidelines or requirements around setting up and operating a public key infrastructure that are more restrictive than whats shown in these videos.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Feb 20, 2025 04:08 PM
From: Radius39
Subject: Clearpass EAP-TLS Certificate Template
Hello. My organization is going to be migrating to EAP-TLS authentication with client certificates. The Windows Server Admin is asking me "Does Clearpass have a guide to create the certificate template for the EAP-TLS?" I have searched the Clearpass 11.X User's guide for the information and I'm not seeing much in the way about "Certificate Template." Does any one know the answer?