Hi All, I've had a look around and couldn't find much information about how to do this, so thought I'd maybe try my luck here! In a demonstration of clearpass (Aruba radius product) one nice thing it did was send certificates direct to clients (or made a webpage available with a cert download link). Does anyone know whether this is possible in some way with a freeradius based radius system? Unfortunately we don't run an openssl / tinyca etc based CA, it's AD based and I have no control over that, and we also need to stick with TLS rather than another method of PEAP like mschapv2. I'm not aware of an exposed api, apart from the obvious web based, interactive one that exists with an MS CA. Anything else presumably couldn't be controlled via linux anyway.. Any ideas? Thanks Andy