{"id":75223,"date":"2023-06-05T13:12:07","date_gmt":"2023-06-05T17:12:07","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&p=75223"},"modified":"2024-06-26T14:21:17","modified_gmt":"2024-06-26T18:21:17","slug":"update-radius-certificates-for-eap-ttls-systems","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/update-radius-certificates-for-eap-ttls-systems","title":{"rendered":"Update RADIUS Certificates for EAP-TTLS Devices"},"content":{"rendered":"\n

JumpCloud’s RADIUS-as-a-Service offers Certificate-based methods for desktops, laptops, and mobile devices to verify that they are authenticating to the correct RADIUS server (so that no one else can pretend to be JumpCloud’s RADIUS server). This will prevent clients from trusting RADIUS servers without the Private Key that matches this Certificate. JumpCloud strongly recommends that you leverage a certificate authentication method for this reason.

This help article explains how to update and deploy the new JumpCloud RADIUS certificate to both Windows and Mac devices.<\/p>\n\n\n\n

<\/p><\/div>

Note:<\/strong> \n

The certificate is required<\/strong> for EAP-TTLS\/PAP authentication methods, and for some PEAP clients as well. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n

Most clients using PEAP do not need to manually add the RADIUS certificate because it is automatically acquired during the device authentication process.
<\/p>\n\n\n\n

<\/p><\/div>

Important:<\/strong> \n