Appendix

How to Generate Customized Certificates?

There are several tools available to create self-signed certificates. This tutorial lets you create a self-signed certificate for Secure LDAP by using OpenSSL.

1. Get started to generate a certification file

   • Download Freeradius code from the link below: https://github.com/FreeRADIUS/freeradius-server/tree/master/raddb/cert

   • Cd to raddb/cert/

   • Adjust customized information in the .cnf file, e.g., domain name, expiration duration, location, etc.

   • ./bootstrap

   • zip cert.zip server.key server.pem dh ca.pem

2. Click Import and upload cert.zip to the EnGenius Cloud.

3. Export ca.pem and install it on the client device if requested.

Note: Some browsers might pop up a Not-Trusted warning message for self-signed certificates. If this is the case, the user must search for an official Certificate Authority (CA) to apply for a (CA) certificate to avoid the warning message.

Supported Operating Systems and Models

EAP-TTLS/PAP and TLS 1.2+ are essential on client devices for LDAP authentication. The following operating systems have native support and get verified working with EnGenius Cloud AP: (updated on 4/20/2022)

• iOS version 13 and higher.

• Google Chrome OS

• Android version 6 and higher

• Microsoft Windows 8 and higher

• MacOS 11 and higher

Example Configuration for Android: