Thanks you Olivier, I will take a look, one thing that is wired is that there are no (at least I could not find it) a step by step guide to how to get this demo certificate up and running with a supplicant for (EAP-TLS setup), here, I am refereeing to the certificate that come with A fresh install of freeradius under the dir certs/ perhaps it is I who is not seeing the bigger picture ..... but one question: if I want to create an EAP-TLS based system..... and considering certificate generation , then isn’t it just as follows: 1. Copy the existing ca.pem from "/etc/freeradius/certs" to the client 2. Generate client.key and client.pem at the client (supplicant) 3. do the connect ? I have not tried this...but it should work right ? ..or am I missing something some configuration in some of these .cnf files ? -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+acp=rtx.dk@lists.freeradius.org] On Behalf Of Olivier Nicole Sent: 23. november 2015 10:35 To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Cc: Freeradius-Users@lists.freeradius.org Subject: Re: advaice on how to create certificates and setup an EAP-TLS from freeradius Achuthan, For all my questions regarding creation of certificate, I use the FAQ of mod_ssl (http://www.modssl.org/docs/2.8/ssl_faq.html0 that I find much detailed and complete. Olivier -- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html