Hello list, on this list, people somewhat regularly lament that they can't get their WPA2-Enterprise WiFi RADIUS server setup deployed to clients easily. That is understandable. Especially in a BYOD context, getting all of your users to "do the right thing" usually involves an error-prone process in lengthy PDF instructions: click through a madness of options here, import CA there, don't disable cert validation, etc. Earlier this month, a new web service was launched which is called "Enterprise Network Configuration Assistant Tool (CAT)" which allows RADIUS / network admins to make deployment of IEEE 802.1X simple and easy. Visit: https://802.1x-config.org (and especially take the tour at https://802.1x-config.org/tour1.php ) As a network admin, you upload the characteristics of your network (issuing CA, expected server name in server cert, supported EAP types, SSIDs to configure...) and in return get a mostly automatic installer for that network, which you can hand out to your users. None of the information you need to upload is a secret. And the best is: the base functionality is *free*. Only if you are a business or enterprise that cares about branding, helpdesk hints, or digital signatures for the generated installers, then you'll need to purchase one of the paid upgrades. I hope I can do something good to the community of IEEE 802.1X / EAP users out there by making sure that a secure deployment can be achieved with ease, and for free. Especially now that some/many people need to replace their EAP deployment profiles due to a possible Heartbleed compromise. Thanks for tolerating this ad ;-) The good folks of https://802.1x-config.org