Certificate Authority
A WPA2-Enterprise network requires a certificate authority (CA) to issue and verify certificates on the RADIUS server. Cloudpath supports many different CA configurations, including an onboard CA to act as your own private CA, certificates issued from an external CA, or Cloudpath acting as a proxy for an existing CA.
If you are using a Microsoft CA, the Cloudpath onboard CA can be configured as your intermediate CA, leaving the your Microsoft CA as your root CA.
Onboard CA
The Cloudpath onboard CA can issue a server certificate to the onboard RADIUS server and it can issue client certificates. After the client certificate issued, all authentications take place using the certificate.
The onboard CA is a full X.509 public key infrastructure (PKI), which can issue client and server certificates binding a public key to a particular common name.