Certificates

Issue client certificates from DashX's internal CA for EAP‑TLS — the credential a device presents to get on the network. Bind a cert to a user, a device, or both.

Issue a certificate

1. Go to Network → RADIUS / NAC → Certificates → Issue.
2. Fill in:
   • Common Name (CN) — the identity on the cert.
   • Directory User ID and/or Device ID (optional) — bind the cert to a user and/or a specific device.
   • Email (optional).
   • Validity (days) — default 365.
   • Server certificate — leave off for client (device/user) certs.
   • .p12 password — leave blank and DashX generates a strong one.
3. Issue.

Save the material — shown once

After issuing, the private key and .p12 password are displayed only once. Download the PEM and .p12, and copy the password, before closing the modal — they can't be retrieved later.

Manage certificates

The list shows each cert's status (valid / revoked) and validity window. Revoke a cert to invalidate it (issuing a replacement for the same identity auto‑revokes the prior one).

tip

For end‑users enrolling their own devices, don't issue by hand — use Self‑Enrollment, which issues the cert and packages the installer for them.