EAP TLS configuration on the WLC and certificate type must be used.

[mcgonzaga]

We are trying to implement 802.1X authentication with EAP-TLS, I would like to know if using an internal CA, using a self-signed certificate, we can carry out this implementation, if it is not possible, do you know what type of certificate we should use?
And I would also like to know if a certificate is generated for each station that will connect to the network?

[MHM Cisco World]

If you use internal CA' you need to add CA cert. To all host.

MHM

[mcgonzaga]

Do I just need to generate a self-signed certificate on the Root CA on my Windows Server, and import the certificate and key, along with the Root certificate to the WLC, and perform the same procedure on all stations?