Adding Mac to our WiFi

[Andrew White]

Hello,

We have 2 x 5508 WLCs and use Cisco ISE, Active Directory and certs to give our Windows laptops access to our WiFi.

I have been asked to get 2 Mac laptops access to this network and make it seamless to the user and allow to roam between APs.

I think Macs can be put on domains and then into AD groups so that will please ISE, but what about certificates?  I think I can manually enroll or add to them, but it's not the best especially it the certificate expires and we start to get more macs.

What do you do?

Thanks

[balaji.bandi]

Look at this reference may help you :

https://support.apple.com/en-us/HT204602

[Andrew White]

Thanks, but isn't this a manual install of the certificate?

[balaji.bandi]

We do have ipad  in the network, we do get certificate expiry report and we push the certificate manually to end ipad devices  from CA. using scripts. is this works for you ?

[Haydn Andrews]

Best way to manage certificates for MACOS is via an MDM solution.

Some examples:

https://www.apple.com/business/it/

https://simplemdm.com/what-can-mdm-do-for-macos/

https://docs.microsoft.com/en-us/intune/wi-fi-settings-macos