Question on certificates before deep dive into EAP-TLS

[Alan DeKok]

Mathieu Simon wrote:
> Telling students how to install a internal CA root isn't going to work,
> it already
> didn't work for teachers in the past ...

  Yes.  That is a problem.

> But allowing only (internal) devices with certs from the internal CA
> through CA_file
> would allow us to more easily integrate those non-personal but
> school-owned devices.

  That would work.

> I just hope I'm not telling complete bullshit... ;-)

  Nope.

> Thank you Alan for your time to answer!

  It's what I do.

  Alan DeKok.