Hi,
Reading this, what do you propose if we don't have any access to client's machine (students or autonomous users) ? I can't provision anything on them, just announce a valid server certificate.
Provisioning is typically done with config files that devices consume. There are tools that generate such config files per-OS ("Apple Configurator" ...) but there are also web services that, once fed with the server details, generate such configs for many popular OSes. One example of such is https://802.1x-config.org Greetings, Stefan Winter -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 2, avenue de l'Université L-4365 Esch-sur-Alzette Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66