Hi In a previous employment we used clouthpath ES (a commercial solution) that allows users to enroll and manage their own certs for EAP-TLS). It's now owned by Ruckus. FreeRADIUS ran the show and we were able to move most PEAP to EAP-TLS (Particularly the BYOD crowd) alan