What is EAP/TLS?
TLS is a certificate based authentication method. If you use it, you will create a client certificate for each user that you allow to use your Wireless LAN. That certificate, together with its private key, is installed on the user’s machine. Only users who have a certificate that you issued, can access your wireless LAN. When you no longer want a user to access your network, you can revoke the certificate. During authentication, the user presents the certificate to the authentication server, but not before the server has presented its own certificate to the client. This way, your users can always be sure they are connecting to the right wireless network, and not a rogue accesspoint from a hacker trying to steal passwords. At BoxedWireless, we use 4096-bit RSA certificates. This is well over the recommended minimum of 1024. Although certificate based, TLS can in addition be password protected, by encrypting the private key with a password. When you do this, the user will need the correc
