Security

Hi I have a question from our client:

 

Info

Client has 3 diffrent domains (forests)

He wants to use Clearpass for authenication.

3 diffrent CA for each domain (forest)

Require EAP-TLS authentication method

 

Questions:

 

a) Can clearpass using service certificates function install each domain CA's server certificate?

 

2) Does client first must configurate his infrastructure for  forests cross trust, than define new root CA  with 3 subordinate CAs for each domain?

 

3) What are other options?

 

A) yes
2) no, this is not required. You just need three auth sources, one for each domain.
3) nothing else is required