Kandji EAP-TTLS setup

This guide walks you through the process of setting up EAP-TTLS (Extensible Authentication Protocol - Tunneled Transport Layer Security) on Kandji MDM with Foxpass. It details the configuration steps required to integrate EAP-TTLS with Kandji, ensuring a secure and streamlined authentication process for your networked devices.

Configure Wi-Fi profile in Kandji

Follow the steps below in Kandji MDM:

• Go to the library.
• Click 'Add New'

• Search for Wi-Fi in the search box.
• Click on Wi-Fi under Profiles.
• Click 'Add and Configure'

Make settings as below. Anything not mentioned, leave as the default.

• Give a name to your profile. For e.g. <Foxpass Wi-Fi profile>
• Install on: MAC
• Assign it to the proper blueprint.

• Service Set Identifier: <YOUR SSID> Note: This must match your network's SSID name exactly including capital letters. SSID 'Foxpass EAP-TTLS' in the screenshot is just an example.

• Authentication Type: WPA2 Enterprise
• Check 'Use as a Login Window configuration'.
• Accepted EAP Types: TTLS
• Authentication: Username and password

• Inner authentication: PAP

• Certificate trust: Select 'Specify server certificate names' and add *.foxpass.com in the textbox. Save your profile.

Enroll your device

Enroll your device to Kandji if not enrolled already. The enrollment URL is your Kandji URL followed by /enroll. Follow the on-screen instructions and install the profile on your MAC. Once the profile is installed, you will be connected to your configured SSID. You can see the status of your profile in Kandji by clicking your device and then clicking dropdown of your Wi-Fi profile.

You can check successful/unsuccessful logs on the RADIUS logs page.