Ripping off the Bandaid

Changing Wi-Fi authentication to certificate-based EAP-TLS isn't exactly high up on anyone's list of fun things to do. But with the demise of EAP-PEAP-MSCHAPv2 (username and password based authentication) looming in the near future, it's a task you should get started on. Hear about how I successfully migrated my entire campus's eduroam network to use EAP-TLS and the lessons I learned while doing it.