On 26 Jul 2015, at 22:26, Benjamin Rechsteiner <benjamin.rechsteiner@automatic-server.com> wrote:

Can someone advise me, where can i buy a third party ssl-cert which is trusted by all windows clients? Cannot provide a self-sign ca-cert to the client ( bring you own device).

You can't - Windows (and most other mainstream OS's) do not trust any CA's for enterprise WiFi authentication. In order to connect without prompting the first time, the device has to be preconfigured with the CA explicitly allowed. Self signed certificates are currently considered best practice, as they mitigate certain types of client misconfigurations. Regards, Adam Bishop gpg: 0x6609D460 jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.