Knowledge base
How certificate-based network authentication works with Microsoft Entra ID and UniFi, and how Passbeam does it — wireless and wired. Written from what the product actually does, including the parts it does not do yet.
38 answers
What this is
Certificates, and how devices get them
- Why does every device need the Trusted Root CA installed?
- What is SCEP, and how does it work?
- Can I use Jamf, Mosyle, Kandji or another MDM instead of Intune?
- Device certificates or user certificates — what is the difference?
- Can I change a client's certificate mode after setup?
- Can I use Passbeam for a network with no Entra ID at all — printers, cameras, door access, building controls?
- How do I set up printers, CCTV, BMS and IoT devices that support 802.1X?
- What happens when a certificate is about to expire?
RADIUS and RADSec
VLANs, and wired ports
People, devices and access
When something is wrong
Reliability and security
Money, and the small print
Not answered here? Ask us. Every message becomes a ticket a person reads.