Skip to main content

Self-Enrollment

Let users enroll their own devices for EAP‑TLS — no admin issuing certs by hand. DashX authenticates the person, issues the cert, and packages the installer/.mobileconfig/.p12.

Enable the portal​

  1. Go to Network → RADIUS / NAC → Self‑Enrollment.
  2. Turn on Enable the public self‑enrollment portal.

Users reach the portal, sign in with their directory account + MFA, and download a ready‑to‑install profile for their OS.

For a specific person (e.g. a contractor, or someone off the directory):

  1. Enter the user identity (CN / email).
  2. Optionally pin it to one network (profile).
  3. Set the certificate validity (days) and how long the link expires in (hours).
  4. Generate and Copy the link, then send it — one use, time‑limited.
note

Point ENROLL_PORTAL_BASE_URL at the backend (not the SPA) so the one‑tap iOS/GET /download flow serves the config correctly. Managed Windows/Mac devices can still use DashX Connect instead of self‑enrollment.