Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

certificate based authentication on 2504 wireless controller

I want to know that how can PC's & laptops connect wireless using certificate based authentication on WLC 2504.

Certificates should be created on 2504 contoller not on CA server.

Hall of Fame Super Silver

Re: certificate based authentication on 2504 wireless controller

The WLC cannot create certificates for client devices of your intention is to perform EAP-TLS. The WLC can do local EAP and act like a radius by using local EAP feature. Here is a document on configuring local EAP.

Sent from Cisco Technical Support iPhone App

*** Please rate helpful posts ***

Re: certificate based authentication on 2504 wireless controller


As per your query i can suggest you the following solution-

EAP-FAST with certificates on both the client and the server side. For this, the setup uses Microsoft Certificate Authority (CA) server to generate the client and server certificates.

The user credentials are stored in the LDAP server so that on successful certificate validation, the controller queries the LDAP server in order to retrieve the user credentials and authenticates the wireless client.

This document assumes that these configurations are already in place:

  • A LAP is registered to the WLC. Refer to Lightweight AP (LAP) Registration to a Wireless LAN Controller (WLC) for more information on the registration process.
  • A DHCP server is configured to assign an IP address to the wireless clients.
  • Microsoft Windows 2003 server is configured as domain controller as well as CA server. This example uses as the domain.

Refer to Configuring Windows 2003 as a Domain Controller for more information on configuring a Windows 2003 server as a domain controller.

Refer to Install and Configure the Microsoft Windows 2003 Server as a Certificate Authority (CA) Server in order to configure Windows 2003 server as Enterprise CA serve

For more information please refer to the link-

Hope this will help you.

CreatePlease to create content