what domain should be input when authentication taking place on WLC

[jacky.cheuk]

As there is an security update for Android 11 and newer version, domain is required for 802.1x authentication. I googled a bit the FQDN of the RADIUS server should be input for the domain , but I don't have a RADIUS server for authentication, which is taking place on the WLC, what domain should be input for Android 11?? 

And there is a saying about using public signed CA to do the 802.1x authentication for Android 11 is required, is it true? Can I still use internal signed CA for 802.1x authentication for Android 11?  Android 7 & 9 using the same set of certificates work properly without any problem as domain is not required to enter. 

Do you have the same problem for your Android 11 or newer version devices? And how did you fix it? 

[Rich R]

I believe you will need a valid public cert matching the DNS FQDN of your WLC.

If you're not using radius then the WLC will effectively be your "radius" that does the authentication so it will be the same domain.

We are using public certs.