Results

Once the configuration is complete, you should now be able to authenticate your computer using FortiAuthenticator with a Microsoft AD Root CA.

To confirm computer authentication is working as intended:

1. When connecting to the client, you can see Authentication Success in the FortiAuthenticator logs.
   
2. When reviewing the debug logs, you can see that certificate binding check has passed.
   
3. On FortiGate, you can see that the client successfully connected:
   
4. Packet capture shows the RADIUS-Accept message, including the VLAN 240.