Likely to be a cert issue.  Latest versions of freeradius now have the extra extension present that windows 8/8.1 (and windows phone) require<br>
<br>
Yes. If you want working and secure EAP TTLS the CA of the RADIUS server needs to be known/trusted.  Use the certificate manager to ensure the cert is in the LOCAL MACHINE trusted root folder. .. not the current user folder. <br>
<br>
alan