Here are some things you can check if you don't have a fit yet:   Ensure that the entire certificate chain is trusted by FreeRADIUS. This includes the root CA and any intermediate CAs.   Make sure that FreeRADIUS can access the CRL to check for revoked certificates. Ensure that there are no firewall rules blocking RADIUS traffic between the Meraki AP and the FreeRADIUS server.   Verify that the Windows 11 PC is correctly configured to use EAP-TLS with the machine certificate and  that the certificate is correctly installed and trusted by the PC.   Below you can check some URLs that may be useful.   Troubleshooting :: The FreeRADIUS project - Documentation   FreeRadius EAP-TLS configuration - Alpine Linux   EAP-TLS: Certificate-based authentication :: The FreeRADIUS project - Documentation   Freeradius: Configure freeradius to work with EAP-TLS authentication - Cisco Meraki Documentation ... View more

Thanks, at the moment I already open a case this morning in parallel of this thread as sometimes we may have some good advices from community 🙂 ... View more