Certificate on Apple Macs

[jpjeffery]

Hi

We're using Certificate based authentication for our Windows machines to connect automatically to our internal Meraki SSID (with RADIUS/802.1x).

The certificate is issued to the client PCs using a GPO and from our Certificate Authority/AD Domain Controllers.

However, we have a few Apple Macs (about four). Clearly using GPO won't help here, but still we need to get the same certificate deployed to these Apple devices.

It would be nice to use our device management solution (ManageEngine's Endpoint Central) to push out the cert, but with only four of them to do, really just a manual process would be plenty good enough.

So, is this something you've had to do at your organisation (and succeeded)? How do we export the certificate from the CAs in a form that will work on the Apple Macs? 

[alemabrahao]

You can enable the  HTTPS Certificate Authority for Web Enrollment.

[alemabrahao]

Or you can use MDM.

https://documentation.meraki.com/General_Administration/Organizations_and_Networks/Organization_Menu...

[jpjeffery]

We have that option, but it doesn't look straightforward to me.

This...

...leads to this...

...leads to this on a Windows client (where only one certificate - "NDES User" - is offered)...

...but to this on an Apple Mac (five certificates offered):

Here's the 'Switches' certificate on the Certificate Authority server (which is offered to the Apple Mac), along with  the one we want ('WiFi') on the Apple Mac (but that isn't being offered to either the Mac or to the Windows client)

[UKDanJones]

MDM is the best way with Apple devices

[jpjeffery]

@alemabrahao @UKDanJones 

Agreed with both of you that it would be nice to use MDM, for which we have ManageEngine's EndPoint Central ("EPC"), but that starts with the problem of how to get the certificate exported so that EPC can work with it.