For Mac computers, you can configure both Wi-Fi and Ethernet EAP settings. These settings must match the requirements of your network. Indicate if the connection should be initiated after users log in, or if it’s a system setting that is active at all times. Some settings are channel-specific.
For device configuration profiles:
You must provide the trusted certificates necessary to authenticate the connection.
The settings are for system mode or Login window mode.
For user configuration profiles, the settings are for 802.1X user mode.
For macOS, you can configure 802.1X on up to three specific Ethernet interfaces or configure it for any Ethernet interface. The interface doesn’t have to be active. After you’ve configured 802.1X, you can set the payload to serve as the Login window configuration.
Available EAP protocols
Select an Extensible Authentication Protocol (EAP) type to use for 802.1X network authentication:
EAP trust configuration
This is used by all EAP protocols.
Specify which certificates should be trusted to validate the authentication server for the network connection. The Trusted Certificates list shows certificates added using the Certificates payload. Add the names of the trusted authentication servers to the Trusted Server Certificates Names list. Specify a particular server, such as server.example.com, or a partial name, such as *.example.com.
See Fastlane settings.