machine-authentication with digital certificate

[hstf_techy]

https://kb.meraki.com/knowledge_base/radius-configuring-peap-mschapv2---machine-authentication

RADIUS: Obtain a digital certificate for a Windows domain member system

I am reading the above article and I am wondering do I need to obtain a certificate manually for each computer?

[Stephen Rodriguez]

no, you do not need to do it manually. 

http://technet.microsoft.com/en-us/library/cc731242.aspx

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

[hstf_techy]

Thanks.

Let say if they are enroll automatically, is there any affect with the authentication process if the PKI server is down?

[Stephen Rodriguez · Accepted solution]

there should not be, unless you are doing a CRL and checking your CA for updates.  So long as your the client trusts the AAA server certificate you should be fine.

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

[Abhishek Abhishek]

Hello,

As per your query i can suggest  you the following solution-

No, there is no need to obtain a certificate manually for each computer.

Hope this will help you.