Appendix

How to Generate Customized Certificates?

There are several tools available to create self-signed certificates. This tutorial lets you create a self-signed certificate for Secure LDAP by using OpenSSL.

1. Get started to generate a certification file

   • Download Freeradius code from the link below: https://github.com/FreeRADIUS/freeradius-server/tree/master/raddb/cert

   • Cd to raddb/cert/

   • Adjust customized information in the .cnf file, e.g., domain name, expiration duration, location, etc.

   • ./bootstrap

   • zip cert.zip server.key server.pem dh ca.pem

2. Click Import and upload cert.zip to the EnGenius Cloud.

Figure06 -- Import Certificate

3. Export ca.pem and install it on the client device if requested.

Figure07 -- Install Certificate on the device

Note: Some browsers might pop up a Not-Trusted warning message for self-signed certificates. If this is the case, the user must search for an official Certificate Authority (CA) to apply for a (CA) certificate to avoid the warning message.

Supported Operating Systems and Models

EAP-TTLS/PAP and TLS 1.2+ are essential on client devices for LDAP authentication. The following operating systems have native support and get verified working with EnGenius Cloud AP: (updated on 4/20/2022)

• iOS version 13 and higher.

• Google Chrome OS

• Android version 6 and higher

• Microsoft Windows 8 and higher

• MacOS 11 and higher

Example Configuration for Android:

Manufacturer	Model	Operating System
Apple	iPhone 7 Plus	iOS 13.1.3
Apple	iPhone 11	iOS 15.4
Apple	iPhone 12	iOS 14.1
Apple	iPhone XS	iOS 14.6
Apple	MacBook Air (M1,2020)	MacOS 12.3
Apple	iPad Air A1474 (2013)	iOS 12.5.5
Lenovo	IdeaPad Duet CT-X636	Chrome OS 72
Google	Pixel 3a	Android 11
HP	ProBook 450 G8	Windows 10
Samsung	S21	Android 11
Samsung	Note 4	Android 6.0.1