The city plans WPA-Enterprise with EAP-TLS for staff laptops. What foundational service must exist for client and server certificates?
Select an answer to reveal the explanation.
Short Explanation
EAP-TLS lives and dies on certificates, so you need a trusted CA/PKI. FTP’d PSKs, skipped checks, or MAC lists are not that foundation.
Full Explanation
Certificate-based WLAN authentication with EAP-TLS depends on a trusted PKI—commonly an internal CA—to issue and validate client and RADIUS server certificates. Without that foundation, enterprise EAP-TLS cannot be operated securely. Shared PSK distribution, captive portals that skip validation, or MAC ACLs do not replace PKI for EAP-TLS.