CC3135MOD: How to create or which root ca to use as certificates for 802.1x enterprise?

Hi,

Whether certificates are required depends on EAP mode. Nice comparison of EAP modes you find here. In brief:

• Cisco FAST - no client or server certificate required
• TLS/TTLS - required client and server certificate
• Other - server certificate required

At this case is server means your authentication server (Free RADIUS, Windows server, etc.) and client is your CC3135. For EAP security is commonly expected self-signed certificate. Common way how to generate self-signed certificate is to using OpenSSL. Client certificate, private key and CA file are expected at DER format in case of CC3135.

Setup of EAP is not about generation of certificate only, but it is about setup of authentication server (RADIUS server). Proper setup of Free RADIUS server, may to be tricky. Providing support for RADIUS server setup is out of scope of this forum. But few useful links:

• https://raspiblog.noblogs.org/post/2019/09/02/wpa2-enterprise-access-point-with-hostapd-and-freeradius/
• https://github.com/FreeRADIUS/freeradius-server/tree/master/raddb/certs
• https://wiki.freeradius.org/guide/eduroam
• https://openwrt.org/docs/guide-user/network/wifi/freeradius

Jan