TTLS+PAP with Windows

Stefan Winter stefan.winter at
Thu Mar 16 11:18:07 CET 2017


> Reading this, what do you propose if we don't have any access to
> client's machine (students or autonomous users) ? I can't provision
> anything on them, just announce a valid server certificate.

Provisioning is typically done with config files that devices consume.

There are tools that generate such config files per-OS ("Apple
Configurator" ...) but there are also web services that, once fed with
the server details, generate such configs for many popular OSes. One
example of such is


Stefan Winter

Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <>

More information about the Freeradius-Users mailing list