We have 20 location and about 150 laptop clients, each location has Cisco WLC 5508. Right now everyone is using same password which is individually configured on all WLCs.
Is there any management software that allows to set WiFi password automatically on all laptops remotely? - I do not want users to use their windows credentials (so they do not connect phones) - Users are not allowed to know the password (same reason)
The ideal is:
- I configure username/password in ACS
- I somehow send (set) username/password (from ACS) on user PCs (THAT IS THE PROBLEM)
- User connects to a network (if user is in WiFi group in AD and authenticated through ACS).
- if i decide to change network password, I update wifi credentials in ACS and all users get this updated credentials on their laptops.
Right now every time we change the password we go through headache of updating it for users.
Update: Thanks for our reply. I was thinking about this and actually configured machine based authentication. And it works through PEAP. Then I though what if someone who not suppose to have wifi access logs in to that laptop (since employees always leave laptops laying on a table unattended). I tried to find a way to perform Machine AND User authentication, but could not find a solution, unless I add all laptops to ACS and create host group and then use User authentication through PEAP. I was thinking more about 2 step process. Step 1: A software or hardware (WHAT I NEED) that takes care of credentials for the device and saves it (lets say only laptops have credentials for WiFi) Step 2: ACS checks against allowed users in AD group, time, location, etc. P.S. May be I want too much, but I think there should be a solution.