topic Re: Best Way to configure cert based WIFI with WPA-Enterprise using the Microsoft Entra ID in Wireless

Best Way to configure cert based WIFI with WPA-Enterprise using the Microsoft Entra ID

UPENDRA8297 — Mon, 14 Apr 2025 15:20:16 GMT

Hello Everyone,

I am exploring the implementation of certificate-based WiFi authentication in our organization. I've reviewed various documents on the Meraki portal, but the many different scenarios presented have created some confusion. We use Microsoft Entra ID for user authentication. Given this, I would appreciate your guidance on the best practices for setting up certificate-based WiFi using Entra ID instead of RADIUS. Since I am new to Meraki, I am seeking suggestions from the community.

Thanks,
Upendra

Re: Best Way to configure cert based WIFI with WPA-Enterprise using the Microsoft Entra ID

mloraditch — Mon, 14 Apr 2025 15:28:04 GMT

Access Manager, which is currently in preview, would be the only built in way to do this without setting up RADIUS:

https://documentation.meraki.com/Access_Manager

It's currently only available on some shards and will require some level of licensing once it's fully released.

Re: Best Way to configure cert based WIFI with WPA-Enterprise using the Microsoft Entra ID

aleabrahao — Mon, 14 Apr 2025 17:39:33 GMT

Take a look at this.

How to configure Microsoft Entra certificate-based authentication - Microsoft Entra ID | Microsoft Learn

Certificate-based Wi-Fi authentication with Systems Manager and Meraki APs - Cisco Meraki Documentation

Re: Best Way to configure cert based WIFI with WPA-Enterprise using the Microsoft Entra ID

Philip D'Ath — Mon, 14 Apr 2025 19:12:11 GMT

It's quite a complex answer, because it depends on what you have.

If you use Intune and subscribe to CloudPKI, then you can use that to deploy certificates onto your machines. You can then follow this thread to enable it.

https://community.meraki.com/t5/Wireless/Azure-Cloud-PKI-is-now-released-how-do-we-hook-Meraki-AP-to-it/m-p/230754

If you already have an MDM but you don't have the above licences, you could consider using Meraki Trusted Access.

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Trusted_Access_for_Secure_Wireless_Connectivity

If you don't have any MDM then you could consider using Meraki Systems Manager with its certificate based enrollment system.

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Certificate-based_Wi-Fi_authentication_with_Systems_Manager_and_Meraki_APs

You could also consider using Meraki Sentry in combination with the above.

https://documentation.meraki.com/SM/Deployment_Guides/Systems_Manager_Sentry_Overview

Because of all the options, it might be a good idea to engage with a Cisco Meraki partner to narrow down the options.

Re: Best Way to configure cert based WIFI with WPA-Enterprise using the Microsoft Entra ID

gary5555 — Wed, 20 Aug 2025 23:27:41 GMT

Take a look at this solution. Meraki access manager + cloud pki

https://www.hypershift.com/blog/meraki-intune-cloud-pki