Server certificate renewal
A.L.M.Buxey at lboro.ac.uk
Sun Jan 10 14:58:30 CET 2016
>From experience, ios manually configured clients - where users have been presented the previous cert and put in their user/pass ... ios records the fingerprint of the server cert.
So with a new server cert with same commonname / SAN and signed by the same CA , the user will be prompted about the new fingerprint . You don't get this with a client configured by a deployment tool. ..eg with mobileconfig profile
More information about the Freeradius-Users