Configure the EAP server certificate and CA for EAP-TLS
To set an EAP Server Certificate and CA for EAP-TLS:
- Go to Authentication > RADIUS Service > Certificates.
- In Server Settings > EAP Server Certificate, select the publicly signed certificate matching the FortiAuthenticator FQDN (e.g. fac.fortixpert.com).
- In EAP-TLS Authentication > Local CAs, select the local CA (e.g. FortiXpert_Root_CA).
- Click OK.