Passbeam

Product

All featuresEverything Passbeam does, on one pageIntune certificatesA private authority per client, over SCEPChromebooksCertificates from Google AdminBYODPhones and laptops you don't manageVPN gatewaysThe same certificate, through IKEv2Guest Wi-Fi loginsEach login expires on its ownSessions and disconnectWho is on now, and ending a session

Solutions

Wi-Fi with Entra IDDevices sign on with the account they haveReplacing Windows NPSRetire the server, keep the networkCloud-only 802.1XNothing to install on sitePrinters, cameras, door controlsCertificates for hardware you can't enrol802.1X on UniFiRADSec from UniFi to PassbeamRADSec explainedRADIUS over TLS, and when to use itSupported equipmentCisco, Aruba, UniFi, Juniper, Meraki and more

Resources

Knowledge baseSetup guides and answersStatusLive service statusSecurityHow we protect your dataContactTalk to us
PricingSign in
Get started

What does Passbeam actually do?

Passbeam does two jobs. It runs a certificate authority for each of your clients, and it's the RADIUS server your switches, access points and VPN gateways ask when a device tries to connect. That's 802.1X, over RADIUS or RADSec.

Devices connect with a certificate instead of a password. Every connection checks that the certificate belongs to this client, hasn't expired and hasn't been revoked. When an account is disabled in Entra ID, Passbeam revokes its certificates, so that person's devices stop connecting. There's no shared Wi-Fi password to give out or to leak.

It works the same for Wi-Fi, wired and VPN. One certificate gets a laptop onto the Wi-Fi, onto a switch port and through the VPN from home. Passbeam can also put each device or person on its own VLAN.

Printers, cameras, door controllers and building management systems can have certificates too, from the same authority. A client can be just those, with no Entra ID behind it.

Related questions

Still stuck? Ask us, or read the rest of the knowledge base.