Hi, > Does the SSID needs to match the common name of the certificate or it can > be an alternative subject? SSID has nothing to do with it - its the CN from the RADIUS server that needs to match in your 802.1X settings on the client alan