Hi, > Does the SSID needs to match the common name of the certificate or it can > be an alternative subject?
SSID has nothing to do with it - its the CN from the RADIUS server that needs to match in your 802.1X settings on the client alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

