If people are having issues with iOS and OSX getting online, you should check out Apples new guidelines: https://support.apple.com/en-ca/HT210176 Even if your certificates meet those criteria, they *might* still be rejected. If so, you should do some tests with the "example.com" certificates that the server builds in raddb/certs. Use a test machine (not the production RADIUS server!) and figure out if the certificates are accepted by iOS. If so, then you may have to get new production certificates which more closely match the test ones. iOS and OSX are "black boxes", and do NOT give useful information as to why they rejected the certificate. If they did, it would be a simple matter to fix the offending field. Instead, Apple punishes everyone for their own laziness. :( Alan DeKok.