Agentic AI Security: The Enterprise Risk Management Guide
Learn how to secure agentic AI with identity-first controls, risk frameworks, and continuous trust principles.
Read article
Most access control failures come down to getting one of two security checks wrong. Here's how authentica...
AuthN vs. AuthZ: What’s the Difference?
Every time a user connects to a Wi-Fi network, opens a cloud application, or logs into a virtual private network (VPN), two security checks happen in sequence. The first verifies...
Every authentication decision your network makes starts with one question: who or what is actually on the...
What Is Digital Identity? A Complete Guide
Every system that grants access — a Wi-Fi network, a VPN, a cloud application — makes the same decision thousands of times a day: is this connection who it claims...
Most HTTPS and Wi-Fi authentication depends on a single certificate field that fails silently when it's w...
What Is a Subject Alternative Name (SAN)?
Every organization running HTTPS, Wi-Fi, or virtual private network (VPN) authentication depends on the subject alternative name field, often without realizing it. Misconfigure it and browsers display security errors. Leave...
A direct comparison of ZTNA and VPNs, covering security architecture, access control, performance, and wh...
ZTNA vs. VPN: Differences and Which Is Better for Secure Remote Access
Remote access has always involved a tradeoff: connectivity vs. control. Virtual private networks (VPNs) solved the connectivity problem for a generation of distributed workers, but that broad access comes with a...
A breakdown of how credential stuffing attacks exploit reused passwords, why brute-force defenses don’t...
What Is Credential Stuffing? How Attacks Work and How to Stop Them
Every large data breach hands criminals a fresh list of usernames and passwords. They do not need to guess your password when they can simply try the one you already...
A technical guide comparing symmetric and asymmetric encryption, covering AES, RSA, and ECC, and how TLS ...
Symmetric vs. Asymmetric Encryption: How Each Works and When to Use Them
Every time a browser loads an HTTPS page, a virtual private network (VPN) establishes a tunnel, or a digital certificate is issued, two distinct encryption models work together. Understanding how...
A technical guide explaining how FIPS mode restricts cryptographic operations to government-validated alg...
FIPS Mode: What It Is, Why It Matters, and How to Enable It
Most IT administrators encounter Federal Information Processing Standard (FIPS) compliance as a line item in a government contract or an audit finding. Knowing what FIPS mode actually does, and what...
A technical guide to how packet sniffing captures network traffic, the attacks built on top of it, and ho...
What Is Packet Sniffing? How It Works, Risks, and Defense
Anyone with the right software and access to a network segment can capture the traffic moving across it. On an unencrypted or misconfigured network, that traffic can include login credentials,...
Kerberoasting lets an attacker with basic domain user access request crackable Kerberos tickets for servi...
What Is Kerberoasting? Attack Steps, Detection & Defense
Active Directory service accounts run the applications, databases, and scheduled tasks that keep a network running. Many of those accounts were created years ago, never rotate their passwords, and hold...
A technical guide to the federal standard that governs cryptographic module validation, covering security...
FIPS 140-3 Explained: A Guide to Compliance
Federal agencies and their vendors operate under a straightforward rule: any cryptographic module handling sensitive data must be validated against a FIPS 140 standard. That rule has not changed since...
Pass the hash lets an attacker walk into your Active Directory environment.
What Is a Pass-the-Hash Attack, and How Does It Work?
A stolen password hash can be just as valuable as the password itself. Pass the hash exploits reusable NTLM hashes to let attackers authenticate without ever knowing the user’s password....
A single unauthorized Wi-Fi device can hand attackers a direct line into your network, bypassing every fi...
Rogue Access Point Attacks: How They Work and How to Stop Them
Every access point on your network is a potential front door. Most of them are points that IT installed and secured on purpose. A rogue access point is one nobody...
Securing satellite-powered networks like Starlink requires identity-based authentication to eliminate the...
Securing Starlink Wi-Fi With 802.1X and Cloud RADIUS
Distributed Wi-Fi networks are undergoing a profound transformation in industries around the globe. Satellite providers such as Starlink are now enabling high-throughput, low-latency connectivity in the air, on the seas,...
A breakdown of MFA fatigue attacks and how phishing-resistant logins prevent them.
What Is MFA Fatigue and How Do Attackers Exploit It?
A stolen password isn’t always enough to get into an account protected by multi-factor authentication (MFA). So, attackers found a workaround: bombard the victim’s phone with authentication requests until they...
The best defense against password spraying is eliminating passwords.
What Is Password Spraying? How It Works and How to Stop It
An attacker does not need to guess your exact password to break into your network. A password spraying attack tests a handful of common passwords against thousands of usernames instead...
A replay attack lets an attacker reuse intercepted login data to impersonate a legitimate user
What Is a Replay Attack? How It Works & Prevention
Passwords and session tokens are meant to prove who you are at a single point in time. A replay attack breaks that assumption. A replay attack is a network security...
As Microsoft deprecates legacy protocols like NTLM, password-based authentication is giving way to certif...
NTLM Deprecation, EAP-TLS, and the Future of Enterprise Authentication
Authentication is one of the three core components of the Authentication, Authorization, and Accounting (AAA) framework used throughout modern IT systems. Before a user or device can access a network,...
This article will explain how the ChromeOS certificate provisioning solution works, and how it provides g...
Google SCEP Deprecation 2026: What ChromeOS Admins Need to Know About Certificate Provisioning
Learn how to migrate from Google's legacy SCEP API to the ChromeOS Certificate Provisioning API before the 2026 deadline.
A technical guide to how certificate chains link end-entity certificates back to trusted root certificate...
Chain of Trust Certificate: How Certificate Hierarchies Work
Learn how certificate chains establish trust and how path validation verifies certificates.
A plain-language breakdown of how distributed denial of service attacks are built, launched, and what you...
How Does a DDoS Attack Work? Attack Types & Prevention
Learn how DDoS attacks work, the attack types used, and how to protect networks from disruption.
Learn how Microsoft Cloud PKI and Cloud RADIUS work together for 802.1X authentication.
Microsoft Cloud PKI and Cloud RADIUS Integration Guide
Learn how Microsoft Cloud PKI and Cloud RADIUS work together to enable cloud-managed 802.1X authentication.
Secure Starlink-powered airplane Wi-Fi with 802.1X authentication and Cloud RADIUS.
Securing Starlink Airplane Wi-Fi with 802.1X and Cloud RADIUS
Airline Wi-Fi has undergone a profound transformation in modern flight. What was once considered an exclusive, premium amenity offered at an additional cost is now a baseline passenger expectation and...
Passwordless SSH setup using OpenSSH key pairs, permissions, and server hardening
SSH Without a Password: How to Set Up Key-Based Authentication
Managing dozens of authorized_keys files across a fleet of servers is where SSH key hygiene breaks down. Static public keys never expire, revocation is manual, and auditing who has access...
Learn how access control lists filter network traffic and strengthen infrastructure security.
Network Access Control List (ACL): Definition, How It Works, Examples
Every device connected to the internet or an internal corporate network is constantly bombarded with data packets. Without a reliable way to filter this incoming and outgoing traffic, networks would...
A practical guide to recognizing a malware infection and stopping compromised machines from spreading dam...
What Is a Malware Infection? Signs, Causes, and Prevention
Every year, attackers refine the ways they deliver malicious software into enterprise environments. A single successful malware infection can escalate from one endpoint to shared file servers, cloud workloads, and...
Prepare for the 2026 RADIUS CA migration before G1 trust removal causes Wi-Fi outages.
RADIUS CA Migration: What Happens If You Don’t Migrate by the End of 2026
When Mozilla and Chrome removed DigiCert G1 from their browser trust stores on April 15, 2026, the internet lit up with guides about which TLS certificates to renew and how...
A plain-language guide to how encryption algorithms work, the major types IT teams rely on, and how they ...
Encryption Algorithms Explained: Types and Standards
Protecting data at rest, in transit, and in use all comes down to one question: which encryption algorithm is doing the work, and how strong is it? Choosing the wrong...
K-12 districts are retiring shared PSKs and PEAP-MSCHAPv2 for certificate-based Wi-Fi that ends password ...
802.1X Certificate Authentication for K-12 Districts: Setup Guide Using Google Admin and Cloud PKI
Most K-12 districts still run shared-device Wi-Fi on pre-shared keys (PSKs) or Protected Extensible Authentication Protocol-Microsoft Challenge Handshake Authentication Protocol version 2 (PEAP-MSCHAPv2), and every August the result is the...
AD CS exposes hospitals to patient safety, network security, and compliance risks.
Replacing AD CS in Healthcare: Why Hospitals Are Moving to Cloud PKI
A hospital’s Active Directory Certificate Services (AD CS) server fails on a Tuesday morning. Workstations on wheels stop authenticating to Wi-Fi, barcode medication administration freezes at the bedside, and the...
A guide to authenticating IoT devices on your network, including certificate-based EAP-TLS for capable de...
IoT Authentication: Methods, Challenges, and Best Practices
Most enterprise networks are running Internet of Things (IoT) authentication on borrowed time. Printers, IP cameras, sensors, HVAC controllers, and medical devices are connecting to the same network segments as...
A technical breakdown of how MCP rug pull attacks work, why standard tool approval workflows fail to catc...
MCP Rug Pull Attacks: The Hidden Threat to AI Agent Deployments
When an AI agent connects to an MCP server, it conducts a rapid security check, approves the tools on offer, and establishes a pattern of trust. The MCP rug pull...
A practitioner's reference covering every layer of MCP server security, from OAuth 2.1 and transport encr...
MCP Server Security: The Complete Guide to Authentication, Authorization, and Hardening
AI teams are deploying new capabilities at a rapid speed, and many security operations are struggling to keep up. In many cases, AI developers now ship MCP servers into production...
A technical walkthrough of how to set up OAth for AI agents — including client credential flow for MCP,...
OAuth for AI Agents: A Practical Implementation Guide
With the explosion of automated processes requesting access to networks, OAuth for AI agents is no longer optional. Today, it’s the authorization foundation that separates well-governed agent deployments from ones...
A practical comparison of legacy “set and forget” certificate issuance against dynamic PKI trust vali...
Static PKI vs. Dynamic PKI for Continuous Validation: Benefits and Features
For two decades, enterprise PKI ran on a simple bargain. Issue a long-lived certificate, trust it until expiration, and clean up revocations on a quarterly cycle. That bargain breaks the...
A practical guide to closing the enrollment channel against spoofed certificate requests using pre-issuan...
Hardening Managed PKI Services Against Enrollment Spoofing
Certificate enrollment has become a high-value control point for attackers because it sits directly between identity systems and network access. As organizations shift to managed public key infrastructure (PKI) services...
A practical guide to why per-MDM certificate strategies fragment at scale, and what a unified PKI for mix...
Unified PKI for Mixed MDM Environments: Why Your Single-MDM Certificate Strategy Is Breaking
If you run more than one mobile device management (MDM) system, your certificate strategy is probably already broken. You likely added Jamf for Macs after standardizing on Intune for Windows,...
SCEP authenticates a shared secret, not the device on the other end of the request.
Why SCEP Without Attestation Is a Security Gap (And How to Fix It)
What Is SCEP and What Does It Verify? The Simple Certificate Enrollment Protocol (SCEP) is an IETF protocol (RFC 8894) for delivering X.509 certificates to managed devices. SCEP is the...
A practitioner-level briefing on homomorphic encryption — covering how it works, the three types, enter...
What Is Homomorphic Encryption and What Is It Used For?
Homomorphic encryption is a new, advanced form of cryptography that closes an attack window left open by other kinds of digital security. Encryption, from TLS to AES, has protected data...
A technical guide to mutual TLS authentication for AI agents covering the mTLS handshake, certificate lif...
Why and When To Use Mutual TLS for AI Agent Authentication
In a world increasingly populated by autonomous agents, mutual TLS (mTLS) is fast becoming a necessity for some deployments. AI agents call APIs, query databases, invoke tools, and communicate with...
A technical guide explaining how port 443 works, what TLS certificates do during the handshake, and how t...
What Is Port 443 and How Is It Used for HTTPS and Network Security?
Port 443 is the dedicated port for HTTPS interactions, and as such, facilitates a basic component of everyday web browsing. You can think of port 443 as a conduit facilitating...
A practitioner's breakdown of every risk in the OWASP Top 10 for Agentic Applications 2026, with concrete...
OWASP Top 10 for Agentic Applications: What Security Teams Need To Know
What Is the OWASP Top 10 for Agentic Applications? The OWASP Top 10 for Agentic Applications 2026 is a risk enumeration framework that catalogs the highest-impact security failures specific to...
A systematic troubleshooting guide for the "peer failed to perform TLS handshake" error in EAP-TLS and RA...
How to Diagnose and Fix the Peer Failed To Perform TLS Handshake Error
The error “peer failed to perform TLS handshake” appears in RADIUS logs when an EAP-TLS authentication exchange terminates before the client and server finish negotiating a secure session. If you...
A guide to SSH key pair authentication — how SSH keys work, what SSH key management looks like at enter...
What Are SSH Keys and Why SSH Certificates Are Better
SSH keys are the dominant method for authenticating administrative access to servers, cloud infrastructure, and network devices. While most IT teams use them, few have a complete picture of where...
Though it’s unclear exactly when Q-Day will arrive, it’s clear that quantum computing will render cur...
What Is Q-Day? The Quantum Threat to Encryption, Explained
There is a watershed moment for network security coming: Q-Day. The term refers to the day when quantum computers running algorithms impossible on classical computers could potentially breeze past most...
Learn how Cloud RADIUS and hardware attestation detect PKI key migration.
Detecting Certificate Migration: How to Track a PKI Key Across Devices
A certificate is only as trustworthy as the device holding its private key. If an attacker exports a key from one laptop and installs it on another, every system that...
How airlines can use RADIUS authentication to move from shared Wi-Fi access to identity-based control in-...
RADIUS Authentication for Starlink In-Flight Wi-Fi Security
In-flight Wi-Fi speeds have been improving dramatically, largely thanks to the Starlink network Airlines that once apologized for sluggish satellite connections now advertise speeds comparable to home broadband at altitude....
SCEP and EST get certificates in the door, but neither protocol can guarantee that the certificates flowi...
Why SCEP and EST Are Not Enough: Layering Defenses Into Your Enterprise PKI Enrollment Architecture
A compromised enrollment endpoint is a quiet disaster. The attacker walks away with a valid certificate signed by your CA, indistinguishable from any legitimate device cert. Choosing an enrollment protocol...
A technical guide to root CA certificates covering how they anchor PKI trust hierarchies, how to protect ...
What Is a Root CA Certificate and Do I Need One?
Every certificate your organization issues — whether for Wi-Fi authentication, VPN access or internal web applications — traces its trust back to a single point: the root CA certificate. That...
A technical guide to the User Datagram Protocol — covering how UDP works, why RADIUS runs over UDP on p...
What Is the User Datagram Protocol (UDP)?
UDP is one of the two foundational transport protocols in the TCP/IP stack. The protocol is simple, fast and stateless — and those same properties make it the right choice...
Certificate-based 802.1X gets you past passwords. Real-time identity lookup gets you past stale trust.
RADIUS Authentication: How Real-Time Identity Lookup Closes the Trust Gap
Most organizations deploying 802.1X authentication know the goal: replace passwords with certificates, use EAP-TLS, and stop worrying about credential theft. That part of the story is well understood. What gets...
A complete guide to Bring Your Own Device — covering the definition, BYOD vs. CYOD/COPE/COBO policy typ...
What Is BYOD? Meaning, Security, and How To Implement It
Personal device use at work is no longer an exception. In fact, it’s the default at most organizations. When your IT team asks whether employees should connect personal phones and...
A technical breakdown of domain validated certificates, explaining what the validation process proves, ho...
What Is a Domain Validated (DV) Certificate? DV vs OV vs EV Explained
Most organizations run into domain validated DV certificates the first time they put a website on HTTPS. They are cheap and fast, often issuing in minutes. But DV certificates are...
A practitioner's guide to elliptic curve cryptography, explaining how ECC and ECDSA work, how they compar...
Elliptic Curve Cryptography: ECC, ECDSA, and Device Certificates Explained
Certificate algorithm selection sounds like a configuration detail, but it has real consequences for authentication speed, certificate payload size, and PKI scalability. Elliptic curve cryptography (ECC) has become the dominant...
Learn how to migrate from NDES to cloud SCEP to eliminate on-prem infrastructure and simplify certificate...
Migrating From NDES to Cloud SCEP: A Step-by-Step Guide for Intune Admins
If you are planning an NDES to cloud SCEP migration, you are not alone. Many Intune admins are working through this same transition as on-premises public key infrastructure (PKI) systems...
Configure Okta Device Access SCEP end-to-end and avoid common pitfalls like renewal gaps and EKU misconfi...
How to Configure SCEP Certificate Enrollment With Okta Device Access (ODA)
Phishing-resistant device trust is the bar Okta Device Access (ODA) raises for every IT team running an Okta tenant. The device proves itself with a certificate, and that certificate lands...
A practical guide to HIPAA shared workstation authentication using PKI, device certificates, and per-clin...
Best Practices for Shared Clinical Workstation Authentication Under HIPAA
Enabling shared workstation use while remaining HIPAA-compliant is a difficult task. Take this scenario: A med-surg nurse logs into the EHR forty times in a twelve-hour shift on a workstation...
Deploy EAP-TLS for hospital Wi-Fi with cloud PKI and passwordless 802.1X authentication.
EAP-TLS for Hospital Wi-Fi: A Cloud PKI Setup Guide Without On-Prem RADIUS
A nurse rolls a workstation on wheels (WoW) from triage to Bay 4 and the screen freezes for fifteen seconds while the cart re-associates against a shared PSK. That delay...
Compare Okta Device Trust and certificate-based authentication for Continuous Trust
Okta Device Trust vs Certificate Authentication
Learn the differences between Okta Device Trust and certificate-based authentication for Zero Trust security.
A technical breakdown of how cloud-native RADIUS and PKI integrate with Microsoft Entra ID to deliver rea...
802.1X Authentication With Entra ID (Azure AD): Cloud RADIUS and Real-Time Identity Lookup
Watch the full explainer video: 802.1X and Azure AD: WiFi Authentication with Entra ID + SecureW2 802.1X authentication is the standard for securing enterprise Wi-Fi and wired networks. But for...
This guide covers what device identity is, how it's established (from MAC addresses to X.509 certificates...
What Is Device Identity? Certificates, PKI and 802.1X
Most security teams have strong user identity controls. Multi-factor authentication, single sign-on and identity providers (IdPs) are standard. But device identity gets far less attention than it should. A device...
Both SecureW2 and Portnox offer modern cloud RADIUS capabilities, but they take different approaches to n...
SecureW2 vs. Portnox | Comparison and Reviews 2026
Choosing the right cloud RADIUS solution is critical for securing network access, enforcing Zero Trust policies, and eliminating credential-based risks. SecureW2 and Portnox are two widely recognized platforms in this...
Self-signed = self-sabotage..
Self-Signed Certificates: Risks, Use Cases, and Safer Alternatives
A self-signed certificate is one that is signed by the same entity that created it, rather than by a trusted Certificate Authority (CA). Self-signed certificates provide encryption but offer no...
CRLs: Instantly block revoked certificates, stay secure!
What is a Certificate Revocation List (CRL)? OCSP, CRL, SSL
A CRL certificate check is one of the most basic safeguards in public key infrastructure (PKI). When a digital certificate is compromised, incorrectly issued or no longer trusted, the certificate...
Android Pushes For Adopting Certificate-based EAP-TLS Implementation.
Android 11 Server Certificate Validation Error and Solution
*Updated Feb 2021 The dust has settled on the Dec 2020 Android 11 update and, for better or worse, the effects on network authentication have not been as drastic as...
Certificates Made Easy for Azure AD.
How to Integrate with Entra ID For Effective Certificate Management
The transition from on-premise Active Directory (AD) to cloud-based Azure AD (Microsoft Entra ID) can be tricky, leaving Azure admins searching for an easy way to migrate. Unlike AD, there...
WPA2 vs 802.1X: Understanding the Key Differences in Wi-Fi Security
WPA2 vs 802.1X: What’s the Difference?
Nowadays, there are numerous methods and types of encryption used to secure networks. Businesses should look beyond using WPA2-PSK, which isn’t secure enough for their needs. It’s easy to get...
Everything You Need to Know About iOS 802.1X
Complete Guide to iOS 802.1X
Securely connecting iOS devices to a network can be a difficult task, especially since the Covid-19 pandemic sped up the inevitable rise of hybrid work environments. Network security must be...
Step-by-Step Guide: Setting Up 802.1X with Azure AD
Authenticate with Azure AD (Entra): 802.1X Setup
You can configure 802.1X using Azure AD by syncing it with an LDAP server or enrolling every device with an x.509 certificate.
RADIUS CBA: Smarter, safer authentication.
What Is RADIUS Certificate-Based Authentication?
As cyber security risks increase and secure access to network resources is required, organizations are adopting different authentication methods. RADIUS certificate-based authentication is one of those methods that increase the...
Strengthen your network's defenses with 802.1X.
What are the three components in the 802.1X system?
The 802.1X system has three primary components: the supplicant, the authenticator, and the authentication server. The supplicant is the part of the device that requests access, the authenticator is the...
Wi-Fi Security Explained: The Safest Authentication Method
What is the Most Secure Method of Wi-Fi Authentication?
The first layer of defense for a wireless network is the authentication process. With a strong authentication barrier, an organization can feel confident that only approved network users are able...
Windows Machine Certificate Authentication: Complete Setup Guide
How to Enable Windows Machine Certificate Authentication
Whether you use Windows, macOS, or any other operating system, deploying digital certificates for your device can be the most impactful step to strengthening your network security. Digital certificates use...
Trust starts at the server — secure it with a certificate.
What Is a Server Certificate and How Does It Work?
Every time you visit a website using HTTPS, a server certificate is working in the background. It confirms the server is legitimate, kicks off encryption, and keeps data private in...
Enterprise PKI OCSP Error? Here’s the Solution
[Solved] Enterprise PKI OCSP Error
Certificate Management has emerged as one of the better alternatives to avoid the vulnerabilities of credentials in modern-day cyberspace. Here’s a recent incident of a high-profile data breach involving credentials...
RADIUS vs. TLS vs. EAP-TLS: Understanding the Key Differences
What’s the Difference between RADIUS, TLS, and EAP-TLS?
There are many components involved in running a secure network. It’s very easy to get bogged down by different terminology and be confused about what exactly each component does. This...
Passpoint: Secure. Simple. Future-Ready.
How to Connect to Passpoint Wi-Fi on iOS
In a nutshell, Passpoint is a protocol developed by the Wi-Fi Alliance that allows users to connect securely to a Wi-Fi hotspot. Designed to operate like roaming works for cellular...
WEP, WPA, WPA2 and WPA3: Which Wi-Fi security protocol is right for you?
WEP vs. WPA vs. WPA2 vs. WPA3: Wi-Fi Security Compared
Networks running outdated Wired Equivalent Privacy (WEP) or Wi-Fi Protected Access (WPA) protocols can be cracked in minutes. While newer protocols improve security, they don’t eliminate every risk. WPA2-Personal, for...
From passwords to certificates, upgrade your Microsoft security.
Microsoft PKI Best Practices
A Public Key Infrastructure (PKI) is an 802.1x network security solution that uses public-private key cryptography to authenticate users for online resources. PKIs can be configured to authenticate for Wi-Fi,...
Revoke Certificates in Windows Active Directory Certificate Services (AD-CS) Safely
How To Revoke Certificate in Windows (AD-CS)
Digital Certificates are an integral part of a Public Key Infrastructure (PKI) and cybersecurity as a whole. The certificates can encrypt communications and authenticate the identity of users and machines....
Public vs. Private Certificate Authority: Which One Should You Use?
What Is a Private CA? How Internal Certificate Authorities Work
Certificate authorities (CAs) play a critical role in securing digital communications and data exchange. Organizations must choose between public and private CAs based on their unique security requirements, use cases,...
Certificates + EAP-TLS Enhance Wired And Wireless Networks With Certificates.
How to Use IEEE 802.1x Authentication for a Wired or a Wireless Network
IEEE 802.1x authentication is a standard for port-based network access control. It essentially requires devices to authenticate themselves before gaining access to network resources. This standard is versatile, working seamlessly...
Wi-Fi certificate authentication replaces passwords with digital certificates to securely verify devices ...
What Is Wi-Fi Certificate Authentication & How Does It Work?
Wi-Fi certificate authentication replaces passwords with digital certificates to verify devices and users before granting network access. This guide explains how certificate-based authentication works using 802.1X, RADIUS servers, PKI, and...
Public Key Infrastructure: A High-Level Guide to Secure Networks
Public Key Infrastructure- A High-Level Overview
Digital signatures are pivotal to cybersecurity. They offer a robust mechanism to verify the authenticity and integrity of a document or message. Imagine sending a handwritten letter; your signature assures...
Secure Your Devices: Configuring SCEP Profiles in Intune Explained
Configuring SCEP Profiles in Intune: A High-Level Overview
Network administrators are beginning to widely adopt digital certificates, which offer greater cryptographic protection than passwords and usernames. Certificate issuance remains a problem, however, especially for teams managing many devices. For...
Jamf Pro 11 + ACME + MDA: Certificates that prove your device, not just your identity.
Auto-Enrolling Certificates in Jamf
Digital certificates have become the backbone of safe access in Apple environments, and Jamf is still the top platform for managing Macs, iPhones, and iPads at scale. By integrating Jamf’s...
Windows 802.1X Authentication Made Simple: A High-Level Overview
A High-Level Overview of Windows 802.1x Authentication
802.1X is a network security protocol that enhances the security of a network by requiring authentication before granting access, preventing unauthorized network access. In Windows environments, 802.1X is widely employed...
A practical checklist for locking down AD CS certificate templates, mitigating ESC vulnerabilities and pl...
Active Directory Certificate Services Best Practices for Security Hardening
Learn AD CS best practices to harden certificate templates and reduce privilege escalation risks.
Simplify security with Automated Certificate Management (ACME).
What is ACME Protocol and How Does it Work?
Want to understand what Automated Certificate Management Environment (ACME) Explained is all about? Read this to know more.
RadSec Explained: Secure Your Roaming Network with Ease.
What is RadSec? A Complete Guide to RADIUS over TLS
Integrating a RADIUS server with your network security infrastructure is a wise decision. RADIUS or AAA (Authentication, Authorization, and Accounting) servers guard your network against unauthorized access by verifying individual...
802.1x Scales Where PPSK Stalls
What is PPSK? A Guide to Private Pre-Shared Key Security
Believe it or not, the aging WPA-Personal protocol has seen some innovation in the past few years. Several companies have developed unique PSK authentication protocols with varying names, though “Private...
Configure 802.1X authentication and RADIUS on Ubiquiti UniFi to secure enterprise Wi-Fi with certificate-...
How to Configure 802.1X and RADIUS for Ubiquiti UniFi
This guide explains how to configure 802.1X authentication and a RADIUS server for Ubiquiti UniFi networks. Learn how to deploy secure Wi-Fi access using WPA2-Enterprise, certificate-based authentication, and cloud RADIUS...
Microsoft CA Certificate Renewal: A Complete Stepwise Guide
Your Guide To Renew Certificates On Microsoft CA
Organizations can leverage digital certificates to build a robust network, as certificates use public-private key encryption to encrypt information sent securely over-the-air. Managing digital certificates for a smaller organization is...
Learn how wildcard certificates secure subdomains and the risks they introduce.
What are Wildcard Certificates
Learn what wildcard certificates are, how they work, and the security risks of using them.
SSH Certificate Authentication Explained: How It Works to Secure Access
SSH Certificates: The Ultimate Guide to SSH Authentication
Secure Shell (SSH) certificate authentication is how organizations such as Google, Netflix and Uber manage server access at scale. If you are still relying on static SSH keys and `authorized...
Certificate management ensures digital certificates are issued, renewed, and revoked securely to prevent ...
What Is Certificate Management?
Certificate management, also known as Certificate Lifecycle Management (CLM), governs the issuance, renewal, monitoring, and revocation of digital certificates within a PKI.
The Best CloudRADIUS Server for Next-Level Authentication
What Is a Secure RADIUS Service and How Does It Work?
Due to the COVID-19 pandemic, employees are working from home now more than ever before. According to a Stanford study, an incredible 42 percent of the U.S. labor force now...
The attack that slips between you and trusted connections
What Is a Man in the Middle Attack? MITM Explained
If you’ve ever watched this scene from SpongeBob SquarePants, you’ve already seen the basic idea behind a man-in-the-middle (MITM) attack: two parties believe they’re communicating directly, while an attacker secretly intercepts...
Understand how AAA servers enable secure authentication, authorization, and accounting for network access...
What Is an AAA Server? How Authentication, Authorization, and Accounting Work
Learn what an AAA server is, how it works, and how it secures network access with authentication and authorization.
Certificates should renew themselves, your IT team has bigger battles.
Configuring Certificate Auto-Enrollment with Microsoft GPO
Enterprises that use Public Key Infrastructures (PKI) will have to issue and manage tens or even hundreds of thousands of digital certificates. Keeping track of all those certificates may seem...
Fix SCEP Workgroup Enrollment Issues: Troubleshooting Certificate Initialization Errors
Resolving SCEP Certificate Enrollment Initialization for Workgroup Error
Utilizing MDMs to establish a highly secure environment is an excellent safeguard for mitigating user error risks and developing consistency in device management. This common practice amongst enterprises is a...
Complete Guide: Setting Up 802.1X on MacOS for Secure Networks
Complete Guide to MacOS 802.1X
Implementing robust authentication protocols is paramount in today’s hyper-connected digital environment, where data security and network integrity are paramount. MacOS 802.1X authentication stands out among these protocols as a crucial...
Ditch weak passwords. Deploy certificates for PNAC and 802.1X authentication.
802.1X Port-Based Network Access Control (PNAC) Explained
As cyber threats evolve, authorized access to network devices and critical resources becomes even more important for organizations of all sizes. port-based network access control (PNAC) is an effective authentication...
One setup, endless protection, 802.1X for Android.
Complete Guide to Android 802.1X
In this article, we’ll examine a crucial authentication method for keeping your Android devices secure while connecting to networks. It’s called 802.1X authentication. This specific security approach ensures only the...
Every smart card, a key to unbreakable enterprise security.
What to Know About PKI Smart Card Authentication
Companies and governments around the world are rapidly adopting PKI smart cards, especially for identity management. These tiny chips can be found in a multitude of applications including ID cards,...
SecureW2 vs. Keyfactor: Comparison and Reviews 2026
As organizations increasingly adopt zero-trust security models and scale certificate-based authentication, public key infrastructure (PKI) has become a critical component of modern security architecture. But certificate management alone is no...
This comparison breaks down the differences to help IT and security teams determine which solution better...
SecureW2 vs. Keytos | Comparison and Reviews 2026
As organizations increasingly adopt zero-trust architectures and shift toward certificate-based authentication, selecting the right PKI and authentication platform becomes a critical decision. SecureW2 and Keytos are two solutions in this...
Learn how to get PKI Certificates and why they matter.
What Is a PKI Certificate? Public Key Infrastructure Explained
Imagine conducting important business online without identifying the person you’re interacting with. It would be like handing sensitive documents to a stranger on the street; every login would be risky....
The RADIUS protocol and the future of secure access
How RADIUS Authentication Works & Why You Should Use It
A RADIUS server prevents unauthorized access to your network - and, thanks to services like Cloud RADIUS, this powerful authentication tool is more accessible than ever.
The RADIUS protocol and the future of secure access
What Is the RADIUS Protocol and How Does It Work?
RADIUS protocol controls who gets into your network, what they can access, and keeps a full record of everything they do, across Wi-Fi, VPN, wired, and cloud environments, all from...
NAC enforces identity-based access at the network edge using authentication, authorization, and complianc...
What Is Network Access Control? NAC Explained
Network Access Control (NAC) regulates device and user access at the network edge using authentication, authorization, and compliance enforcement to strengthen enterprise security.
Non-human identities secure AI agents and workloads with PKI-based authentication.
What Is a Non-Human Identity? A Guide to NHI Security
This guide explains non-human identities (NHIs), including AI agents, workloads, and IoT devices. It explores the risks of API keys and bearer tokens and explains how PKI-based certificates and SPIFFE...
Managed PKI vs on-prem: cost, scale, and security
What Is Managed PKI and How Does It Work?
Managed PKI services simplify certificate lifecycle management, reduce infrastructure costs, and scale securely compared to on-prem PKI deployments.
PKI authentication secures enterprise access using digital certificates instead of passwords.
What is PKI Authentication? How PKI Authentication Works
PKI authentication verifies users and devices using digital certificates and asymmetric cryptography. This guide explains how PKI authentication works, its benefits for enterprise security, and how organizations use certificate-based authentication...
Root vs. intermediate certificates: What every admin should know
Root vs Intermediate Certificate Authority Guide
One of the main problems in online communication is trust. Let’s say you communicate with your bank through its website: how can you be sure the bank’s page is real...
Learn how certificate authorities issue digital certificates and enable secure authentication.
What is a CA? Certificate Authority Definition, Types, Examples
Learn what a certificate authority is, how it works, and its role in secure authentication and PKI.
This guide explains the SPIFFE standard and its runtime implementation, SPIRE. It details how the framewo...
What Is SPIFFE? A Guide to Workload Identity and SPIRE
SPIFFE and SPIRE are modern networking solutions that help automate the process of identifying automated network users. They operate at the application layer and integrate with other protocols working at...
Automate PKI to secure your network.
Best PKI Solutions in 2026: Top PKI Vendors Compared
As an increasing number of organizations adopt Zero Trust security and certificate-based authentication, Public Key Infrastructure (PKI) has become a foundational component of modern identity and access management. However, manually...
Enterprise Wi-Fi Security Simplified: Best Practices for Microsoft Intune Profiles
Intune Wi-Fi Profile: How to Configure Enterprise Wireless Security
Microsoft Intune lets admins push Wi-Fi profiles to managed devices, giving users seamless access to 802.1X enterprise networks, with no manual setup required. There’s a catch, though: a misconfigured Intune...
Understanding CSRs: How certificate signing requests work in PKI
What Is a CSR Certificate? Certificate Signing Requests Explained
Before a certificate authority (CA) can issue a digital certificate, it must first receive a certificate signing request (CSR). Whether you’re securing a website with a Secure Sockets Layer/Transport Layer...
A technical breakdown of the AirSnitch research, the three attack methods that defeat client isolation, a...
AirSnitch: How it Changes Wi-Fi and Practical Defense Guidance
Learn what an AirSnitch attack is, how it works, and how to reduce risk with better Wi-Fi security architecture.
Learn how MCP tool poisoning hijacks AI agents and how PKI-based trust can stop it.
MCP Tool Poisoning: How It Works and How to Stop It
Learn how MCP tool poisoning works and how ETDI, schema pinning, and PKI help stop AI agent hijacking.
802.1X + Intune = Wi-Fi security without passwords.
A Complete Guide to Intune 802.1x
The 802.1X standard provides secure authentication for users and devices looking to connect to wired and wireless networks. It uses an authentication server known as the RADIUS server that validates...
Learn how to secure wireless networks with strong encryption and certificate-based authentication.
What Is Wi-Fi Security? Protocols, Risks, and Best Practices
Learn how Wi-Fi security works, common threats, and how to secure wireless networks effectively.
Secure Your Certificates: Best Practices for AD CS Templates
AD CS Certificate Templates: Security Best Practices
Microsoft AD CS allows administrators to establish their domain’s CA to deploy a digital certificate with Microsoft PKI Infrastructure. To properly run their PKI infrastructure and after establishing their hierarchy, administrators...
SCEP explained: Enrollment, servers and protocol comparison
What Is SCEP? Simple Certificate Enrollment Protocol Explained
SCEP automates X.509 certificate enrollment for managed devices and integrates with MDMs for secure Wi-Fi, VPN, and enterprise authentication.
Wi-Fi security made easy: Nine hacks and effective preventive measures
How to Hack Wi-Fi: 9 Methods, How They Work & Prevention
Wi-Fi networks face threats ranging from deauthentication and evil twin attacks to replay and packet sniffing. This guide explains how these attacks work at the protocol level and how modern...
A resource for choosing the right EAP method for 802.1X authentication.
What Is 802.1X EAP-TLS Authentication?
802.1X authentication is many organizations’ first line of defense against online threats. This IEEE standard defines how port-based network access control should proceed, and it’s a common choice for enterprise...
Protect your network, authenticate smarter with EAP-TLS.
Best Extensible Authentication Protocol (EAP) Method for Wi-Fi
Extensible Authentication Protocol (EAP) is a strong security layer and authentication framework used in Wi-Fi networks. It provides various methods to verify the identities of users and devices before granting...
Track connectivity issues, failure, and error codes in real time.
RADIUS Events Logs: How to View and Access Them
RADIUS servers are often called AAA (authentication, authorization and accounting) servers because they perform each of those three functions. A RADIUS server handles accounting – the process of tracking events...
Fix Wi-Fi certificate errors and ensure secure network access.
[Solved] Wi-Fi Security Certificate Error
Functioning in the current world would be virtually impossible without access to wireless internet or Wi-Fi. Wi-Fi is used by people all over the world for everything from entertainment to...
Solving the “Certificate Signed by Unknown Authority” Problem
How to Fix x509 Certificate Signed by Unknown Authority Error
The “x509: certificate signed by unknown authority” error means a client could not verify the TLS certificate presented by a remote server. Potential causes of this error include the certificate...
Wi-Fi EMFs won’t hurt you, but an unsecured network might.
How Safe Is The EMF Exposure From Wi-fi?
Most people use Wi-Fi, which emits electronic and magnetic fields (EMF). But are the EMFs from Wi-Fi dangerous? The short answer is no, but we'll dig into the question further.
Secure agentic AI with certificate-based identity, continuous trust, and risk-driven controls.
Agentic AI Security: Enterprise Risk Framework and Identity Controls
Learn how to secure agentic AI with identity controls, risk frameworks, and continuous trust principles.
Replace Wi-Fi passwords with EAP-TLS certificate authentication for stronger security.
EAP-TLS vs Password Authentication: Why Certificates Replace Wi-Fi Passwords
Learn why EAP-TLS replaces Wi-Fi passwords with secure, certificate-based authentication.
Learn how network hubs work, their security risks, and modern networking alternatives.
What Is a Network Hub? Uses, Risks, and Better Solutions
Learn what a network hub is, how it works, and why it is no longer secure for modern networks.
Learn how network-level authentication secures RDP and where it falls short.
What Is Network-Level Authentication? What It Does and Doesn’t Do
Learn what network-level authentication is, how it works, and why it’s not enough for complete security.
PKIaaS explained: architecture, benefits, and migration
What is PKI as a Service (PKIaaS)?
PKIaaS is a cloud-hosted approach to managing certificates and trust infrastructure without operating on-premise CAs.
Explore the limitations of Microsoft ADCS and why legacy PKI struggles in modern cloud environments.
Microsoft ADCS Limitations: Why Legacy PKI Falls Short in 2026
Learn the limitations of Microsoft ADCS and why modern PKI is replacing legacy certificate infrastructure.
Explore how PKI in 2026 has evolved into dynamic, identity-driven security infrastructure.
PKI in 2026: How PKI Has Evolved and What It Means for Security
Learn how PKI has evolved into dynamic, identity-driven infrastructure for modern enterprise security.
Compare SCEP vs Intune CA Partner and understand OAuth-based certificate enrollment.
SCEP vs Intune CA Partner: Key Differences in Certificate Enrollment
Learn the key differences between SCEP and Intune CA Partner and how OAuth improves certificate enrollment.
Understand OCSP, certificate revocation, and what replaces it in modern PKI.
What Is OCSP? How Certificate Revocation Works
Learn what OCSP is, how certificate revocation works, and why enterprises are shifting to CRL and short-lived certificates.
Secure agent-to-agent communication with mTLS and PKI-based identity.
A2A Protocol Security: Authenticating Agent-to-Agent Communication
Learn how A2A protocol security works, its authentication gaps, and how mTLS and PKI strengthen agent-to-agent trust.
Adopt identity-first cloud-native security with Zero Trust and certificate-based authentication.
What Is Cloud-Native Security? Principles, Risks, and Implementation Guide
Learn what cloud-native security is, its risks, and how identity-first Zero Trust secures dynamic cloud environments.
Understand how EAPoL enables secure 802.1X authentication for wired and wireless networks.
What Is EAPoL? (Extensible Authentication Protocol over LAN)
Learn what EAPoL is, how it works, and its role in secure 802.1X network authentication.
SecureW2 earns 14 badges in the G2 Spring 2026 reports including Leader recognition easiest setup and ins...
SecureW2 Wins 14 Badges in G2 Spring Reports 2026, Including Multiple Leader Recognitions
SecureW2 earned 14 G2 badges this spring, including Leader recognition in Network Access Control and Certificate Lifecycle Management, and customer-driven recognition for ease of setup, ease of administration, product performance,...
A technical guide explaining how TACACS secures administrative access to network devices using centralize...
What is TACACS and How Does it Work? TACACS vs. TACACS+
TACACS is a centralized AAA protocol used to secure administrative access to routers, switches, and firewalls. This guide explains how TACACS works, why it uses TCP port 49, how encryption...
AES encryption secures modern data across TLS, Wi-Fi, VPNs, and storage systems.
What Is AES Encryption? AES-128 vs AES-256 Explained
AES is a NIST-standardized symmetric block cipher used worldwide to protect sensitive data. This guide explains how AES works, compares key sizes, and outlines where it’s used in modern security...
A technical guide explaining TACACS servers, TACACS+ protocol behavior, TCP port 49, and AAA separation.
What Is a TACACS Server? TACACS+ Explained vs RADIUS Guide
TACACS+ is a centralized AAA protocol designed to secure administrative access to network devices. This guide explains how TACACS servers work, how TCP port 49 is used, key differences between...
A technical guide explaining how TACACS+ secures administrative access to network devices using centraliz...
TACACS+ Explained: Protocol, Authentication & When to Use
TACACS+ is a centralized AAA protocol used to secure administrative access to routers, switches, and firewalls. This guide explains how TACACS+ works, why it uses TCP port 49, how encryption...
SSL stripping downgrades HTTPS to HTTP to expose plaintext traffic.
What Is SSL Stripping? How It Works and How to Prevent It
SSL stripping is an on-path attack that downgrades HTTPS to HTTP, allowing attackers to intercept unencrypted traffic when HSTS protections are absent.
DHCP automates IP assignment but lacks built-in security.
What Is the DHCP Protocol? How It Works & Port Number Guide
DHCP is a foundational networking protocol that automatically assigns IP addresses and configuration settings, but it must be secured with network-level protections.
What Is Bluejacking? How To Protect Yourself From Bluetooth Attacks
What Is Bluejacking? Bluetooth Attack Explained
Bluejacking is the act of sending unsolicited Bluetooth messages to nearby devices. While often harmless, it can be used in phishing or social engineering attempts.
IP whitelisting restricts access by source IP address, but cannot verify user or device identity.
IP Whitelisting Explained: Use Cases, Limits, and Security Risks
IP whitelisting limits access to approved source IP addresses. While useful as a perimeter filter, it cannot validate identity and struggles in cloud and remote-first environments.
Ethical hackers simulate real-world attacks to uncover vulnerabilities before criminals exploit them.
What Is an Ethical Hacker? Why Companies Authorize Security Testing
Ethical hackers perform authorized penetration testing to identify vulnerabilities, strengthen defenses, and reduce an organization’s overall attack surface.
When Wi-Fi authentication works correctly, everyday network users can log on easily to a secure environme...
What Does Authentication Problem Mean? Wi-Fi Error Guide
Wi-Fi authentication problems can result from incorrect credentials, security mismatches, certificate issues, or RADIUS policy errors. Learn how to troubleshoot and prevent them in home and enterprise networks.
New Integrations: Tenable, Zscaler, and Okta Identity Threat Protection
JoinNow 8.3: New Security Integrations, Improved Intelligence Briefs, and more!
JoinNow Platform 8.3 is now available, featuring expanded integrations across a wide range of security platforms—enhancing real-time intelligence capabilities and delivering improvements to Intelligence Briefs. This blog covers all the...
Learn how subnet masks work and how subnetting improves network segmentation and security.
What Is a Subnet Mask? How Subnetting Works
Learn what a subnet mask is, how subnetting works, and its role in network segmentation.
A MAC address identifies network interfaces at Layer 2, but it can be spoofed and should not be trusted a...
What Is a MAC Address? How It Works and Security Risks
A MAC address is a Layer 2 hardware identifier used for local network delivery, but it lacks cryptographic security and can be spoofed.
Network repeaters extend signal range but lack performance control, and security required for modern ente...
What is a Network Repeater? Use Cases, Limitations, and Modern Alternatives
A network repeater extends signal range by regenerating weak signals, but its performance and security limitations make it less suitable for modern enterprise networks.
A network bridge connects LAN segments at Layer 2 but lacks modern security controls.
Network Bridge: How It Works & Security Risks
A network bridge is a Layer 2 device that forwards Ethernet frames between segments using MAC address learning, with important performance and security limitations.
DHCP fingerprinting reveals device types at first connection, but visibility alone is not identity or sec...
What Is DHCP Fingerprinting? Device Identification & NAC Limits Explained
DHCP fingerprinting passively identifies device types using DHCP option patterns, but it provides visibility, not cryptographic identity or access enforcement.
WPA-PSK has a number of vulnerabilities in today’s cybersecurity landscape, issues addressed by newer v...
What is WPA-PSK? How It Works and Better Solutions
WPA-PSK is a method of providing secure access to a Wi-Fi network based on a single, shared password.
Industry veteran Stephen Newhauser, leads new channel program delivers a partner-first framework to drive...
Introducing the SecureW2 Nexus Partner Program
SEATTLE, February 10, 2026 SecureW2, the passwordless security leader, today announced the launch of the Nexus Partner Program, its new global channel program, led by Stephen Newhauser, Senior Director, Worldwide...
Masquerade attacks explained, real-world impact, and how to prevent impersonation
What Is a Masquerade Attack? How Credential Theft Could Cost You Millions
Masquerade attacks use stolen credentials or forged identities to impersonate trusted users or devices. This guide explains how they work, real-world examples, and how to prevent costly damage.
Captive portals explained, where they fall short, and how to secure Wi-Fi access
What Is a Captive Portal? A Guide to Secure Wi-Fi Access
Captive portals control initial Wi-Fi access but fall short on security. This guide explains how they work, their risks, and how to strengthen them.
SQL injection attacks: how they work, real-world impact, and prevention
Understanding and Defending Against SQL Injection Attacks
SQL injection attacks exploit insecure application logic to manipulate database queries. This article explains how SQLi works and how to prevent it.
Adaptive Defense: Automate User Deprovisioning & Reassignment
JoinNow 8.2: ServiceNow Integration, Improved Adaptive Defense, and more!
JoinNow Platform 8.2 is now available, delivering a stronger foundation for Adaptive Defense by enabling external automation. This release introduces ServiceNow support as a real-time intelligence source, with improvements to...
SecureW2 earns 14 industry awards in 2025 for PKI, Cloud RADIUS, and passwordless security.
Best PKI and Cloud RADIUS: SecureW2 Wins 14 Industry Awards in 2025
The SecureW2 JoinNow platform consistently won top awards from cybersecurity experts in 2025. Digital threats are constantly evolving, and that means cybersecurity must keep pace with relentless innovation. SecureW2 remains...
Strong Security Starts with Clear PKI Ownership.
What Are the Risks of Unclear PKI Ownership?
Typically, the security team governs the organization’s overall PKI infrastructure. At the same time, the day-to-day management of digital certificates is delegated to a dedicated PKI operations team. This structure...
Adaptive Defense: Improved Identity & Device Risk Signals
JoinNow 8.1: SentinelOne, Jamf School, ACME Domain Validation, and More!
JoinNow Platform 8.1 is now available, and significantly strengthens how identity, device, and risk signals govern certificate issuance and access decisions. The update introduces support for SentinelOne, Entra ID Protection,...
Stop Unauthorized AI Access: Secure Inference Infrastructure with Certificates.
Securing AI Inference Infrastructure with Certificate-Based Access
Artificial intelligence has moved beyond research labs. It now drives decisions, powers customer experiences, and automates critical operations across industries. As AI becomes more integrated into business workflows, model inference...
How to Configure and Fix Certificate-Based Wi-Fi Authentication in Intune
How to Solve Common Certificate-Based Wi-Fi Authentication Issues in Intune
Intune Wi-Fi profile certificate authentication uses EAP-TLS to replace passwords with a device or user certificate, letting endpoints join enterprise Wi-Fi automatically and securely. It is far more resilient than...
Limited Validity, Stronger Security!
Short-Lived Certificates: Worth the Hype or Operational Headache?
In PKI, certificate lifespans have always been a balancing act between security and operational simplicity. The industry standard has preferred longer-lived certificates valid for one year, and sometimes even for...
Your network, cloud-enabled. Secure and Effortless.
How to Create a Cloud-Based RADIUS Server
What Is a Cloud RADIUS Server? A cloud RADIUS server is a fully managed RADIUS-as-a-Service that handles 802.1X authentication, authorization, and accounting without requiring on-premise server infrastructure. Rather than installing and maintaining physical hardware,...
Pioneering the Future of Continuous Trust
JoinNow 8.0: Adaptive Defense, ACME for Server Certs, and More!
Trust rules how the world works. It’s the foundation of personal relationships, how we choose who to do business with, and how we grant people (and now non-human identities) access...
Scale Secure Access with Google SCEP Profiles
Configure Google SCEP Certificate Automatic Enrollment Profiles
Certificates are far superior to credentials and mitigate many of the vulnerabilities associated with pre-shared keys. They enhance the user experience by facilitating network access and removing password-related friction induced...
Kill the password. Secure the future.
Making the Shift to Passwordless Seamless: Overcoming Objections and Hurdles
Passwords have been the foundation of digital security for decades, but today’s threat landscape has outpaced their effectiveness. Due to resets and lockouts, IT staff are overloaded, and they remain...
ToolShell Reminds Us: Stop Letting Secrets Stand in for Identity
When Static Trust Becomes a Backdoor: Lessons from the 2025 SharePoint ToolShell Exploit
In July 2025, a widely exploited zero-day vulnerability, CVE-2025-53770 & 53771, named ToolShell, hit on-premises Microsoft SharePoint Server systems, triggering a large-scale compromise. The ToolShell exploit gave attackers unauthenticated remote...
Don’t block GenAI, secure it with device trust.
How To: Enabling Safe GenAI Access on Unmanaged Devices and Corporate Wi-Fi
Generative AI (GenAI) tools such as ChatGPT, Claude, and GitHub Copilot have become integral to the workplace and are used by employees as productivity tools. Banning new tech doesn’t work;...
Continuous Trust for Identity-less Infrastructure and Userless Agent
Securing Identity-less Infrastructure and Userless Agents
The security landscape is profoundly transforming as AI and cloud-native technologies reshape organizations’ operations. Today, infrastructure consists of identity-less components such as containers, serverless functions, and ephemeral compute instances that...
Real-World Breach Proves Passwords are Still a Top Risk.
The Password That Collapsed a Company: What We Can Learn from the KNP Logistics Ransomware Attack
“A ransomware attack on the group’s IT systems had such a devastating impact that the group concluded it could not continue to trade,” – BBC KNP Logistics (formerly known as...
Assume breach: Trust nothing, verify everything - because attackers are already inside.
The DoD Just Confirmed What We’ve Been Saying All Along: Trust Must Be Earned
Even the DoD Knows the Perimeter is Dead “There is no such thing as a secure system.” —Lisa Porter, Former Deputy Undersecretary of Defense for Research and Engineering The U.S....
Build Trust at Scale with Policy-Driven Certificate Infrastructure.
Launching Certificate-Based Security Shouldn’t be Intimidating
“Global spending on information security and risk management is expected to grow 14.3% in 2025 to reach $212 billion.” Source: Gartner Press Release, August 28, 2024 Implementing strong network security...
Why Are Organizations Still Using Open Wi-Fi Networks?
5 Million Unsecured Wi-fi Networks: Why We’re Still Failing at Basic Network Security
As of 2025, more than 5 million unsecured Wi-Fi networks are active worldwide. Schools, hotels, small businesses, and even enterprise guest networks continue to rely on open or shared-password Wi-Fi....
Attestation Verifies Every Device, Not Just the Connection.
Certificate Pinning vs. Device Attestation
Certificate pinning is widely used in networks to establish trust between client devices and servers. However, with enterprises shifting to dynamic BYOD and device trust policies, certificate pinning alone does...
MITM vs. AITM: Breaking Down the Layers of Modern Identity Attacks
What is the difference between MITM and AITM?
A traditional Man-in-the-Middle (MITM) attack primarily involves an attacker passively intercepting a communication channel to eavesdrop or steal static credentials, such as passwords. The Adversary-in-the-Middle (AITM) attack takes this a...
Apple MDA: Hardware-Backed Trust for Enterprise Access
Apple Managed Device Attestation Explained
Apple introduced Managed Device Attestation (MDA) to give organizations stronger assurance about the devices they authorize for access. Device Trust, which identifies devices managed by your organization and ensures they...
Authentication Strength Is the Missing Layer in Conditional Access
Understanding Authentication Strengths in Conditional Access
As cyberattacks become more targeted and identity becomes the core of security strategy, IT administrators are rethinking how users authenticate to sensitive resources. Organizations widely adopt Multi-Factor Authentication (MFA) to...
EAP-TLS secures authentication, RadSec secures the transmission path.
Does RadSec support roaming services, such as Eduroam?
RADIUS over TLS, also known as RadSec, enhances roaming services like Eduroam by providing stronger encryption than the standard Remote Access Dial-In Service (RADIUS) protocol. RADIUS in Eduroam utilizes the...
Issue certificates to trusted devices & verify with hardware-backed attestation
Why Is Device Attestation Important For Secure Access?
Device attestation is used to verify a device’s authenticity and ensure that only genuine, untampered devices with approved, uncompromised software are given access to systems. It provides cryptographic evidence through...
PKI Policy That Adapts. Security That Scales.
How Do You Enforce Consistent PKI Policy Across Distributed Teams?
You can enforce a consistent PKI policy across distributed teams by using centralized, automated enforcement with dynamic tools that integrate with your existing IT ecosystem. Manual management methods often lead...
PKI ensures every network connection is a trusted one.
What is a PKI, and How Does It Help Secure Networks in an Organization?
Password breaches have impacted nearly every industry, from telecommunications to healthcare. As threat actors refine their attack methods, securing networks solely with passwords has become increasingly challenging. Organizations are transitioning...
PKI isn’t a specialty anymore, it’s a shared responsibility made simple.
What does a modern PKI team structure look like?
Public Key Infrastructure (PKI) is like experiencing a renaissance. PKI, formerly thought to be the realm of cryptography specialists and obsolete hardware, is now a strategic enabler of business identity...
Keep trusted devices on your network.
Can Continuous Authentication Help Enforce Policy-Based Access with Certificates?
Modern hybrid networks comprise a mix of both managed and unmanaged devices. With static one-time authentication being inadequate, users and devices are only authenticated at the start of a session,...
Ready to deploy WPA3-Enterprise? Your EAP method matters.
What Are the EAP Method Requirements For WPA3-Enterprise?
The only Extensible Authentication Protocol (EAP) method allowed in WPA3-Enterprise 192-bit mode is EAP-TLS, which uses X.509 certificates for client and server-side authentication. No other EAP authentication types are permitted,...
RADIUS + Dynamic PKI: Real-time access, zero trust, fully automated.
RADIUS + Dynamic PKI: Better Together
With many devices attempting to connect to the network, identifying potential risks from compromised devices becomes paramount. This is where a robust Public Key Infrastructure (PKI) integrated with RADIUS comes...
OWE brings encryption to open Wi-Fi—no passwords, no hassle, just protection.
What is Opportunistic Wireless Encryption (OWE) in WPA3?
Public Wi-Fi is available everywhere. However, behind the convenience lies a long-standing issue: unsecured Wi-Fi networks lack encryption, exposing user data to eavesdropping and attacks. Opportunistic Wireless Encryption (OWE), a...
EAP-TLS Secures Credentials, RadSec Secures Everything Else.
Is RadSec Necessary if I Already Use EAP-TLS?
EAP-TLS is a powerful certificate-based authentication technique that has been extensively used due to its high security posture. It enables mutual authentication between the client and server and secures credentials...
MDM pushing SCEP profiles slowly? You’re not alone - let's troubleshoot.
Why Isn’t my SCEP Profile Working?
You’re not alone if you have ever hit “Push” on the Simple Certificate Enrollment Protocol (SCEP) profile in your Mobile Device Management (MDM) only to find that nothing immediately happens....
Tie certificates to real-time device trust, not just enrollment.
ACME Device Attestation: Strengthening Certificate-Based Security
Public Key Infrastructure (PKI) was never designed for an environment where devices could drift out of compliance within hours, sometimes minutes, of being trusted. And yet, many organizations still rely...
Make sure only compliant devices stay connected with continuous authentication.
Dynamic PKI: Continuous Authentication for Modern Security
Traditional authentication models have relied on static trust. Once a device or user is authenticated a single time they typically remain trusted indefinitely. This model assumes continuous security from a...
Continuous authentication ensures that trust isn’t assumed - it’s always earned in real time.
Why Does Certificate Lifecycle Management Automation Need Continuous Authentication?
Enterprises are relying more on automated solutions to manage the lifecycle of digital certificates. Certificate Lifecycle Management (CLM) has evolved from a manual, error-prone process to an automated, API-driven workflow...
Don't just authenticate at login. Continuously validate trust.
Can Continuous Authentication Work with Existing MDM, EDR, or Identity Tools?
Yes, continuous authentication can work alongside existing Mobile Device Management ( MDM), Endpoint Detection and Response (EDR), and identity tools. This is possible when these tools share real-time context and...
Trust both ways, protect your data.
Why is Mutual Authentication Important in Secure Communication?
Mutual authentication is an indispensable feature of secure communication, allowing both entities verify each other’s identities before establishing a connection. In a network environment, the client and server sides verify...
Authenticating a device confirms its identity. Attesting it confirms its integrity.
What’s the difference between device authentication and device attestation?
Device security is more important than ever. Just one compromised device can give attackers access to your whole network. Because of this, security professionals depend on device attestation and authentication....
EAP: The framework that authenticates your future-proof network.
Why Should I Use EAP?
What Is EAP? The Extensible Authentication Protocol (EAP) provides a standard framework for authenticating users and devices to a network. By implementing EAP, organizations can limit the number of users...
TLS secures the data. EAP-TLS secures the door.
What is the difference between TLS and EAP-TLS?
TLS and EAP-TLS might seem identical initially since they depend on encryption and certificate-based authentication. TLS and extensible authentication protocols-transfer layer security (EAP-TLS) are often discussed in network security. They...
Ditch passwords for good. EAP-TLS is the future of secure authentication.
Is EAP-TLS The Same as PEAP?
Extensible Authentication Protocol-Transport Layer Security (EAP-TLS ) and Protected Extensible Authentication Protocol (PEAP ) are both authentication protocols used in the 802.1x framework, but they are not the same. The...
Passwords are a weak link. Your network security doesn't have to be.
What is the Gold Standard of Network Security?
Passwords are a weak link. Your network security doesn’t have to be. Extensible Authentication Protocol-Transfer Layer Security (EAP-TLS) is the gold standard for network security. It allows digital certificates to...
WPA3: The upgrade your network deserves.
How Does WPA3 Improve Wi-Fi Security Compared To Previous Protocols?
Wireless Protocol 3 (WPA3) improves Wi-Fi security compared to the WPA2 protocol, as it provides individual data encryption, side channel protection, and a more robust authentication mechanism through its 192-bit...
No passwords, no loopholes, just certificate-backed trust.
What is 802.1x Authentication Used For?
802.1x Authentication is a network security standard that grants access to wired and wireless networks by validating authorized users and devices. The 802.1X protocol is the IEEE Standard for Port-Based...
Trust the device, not the password.
Understanding NIST SP 800-171 3.5.2: Device Identification & Authentication
NIST SP 800-171 is a cybersecurity framework that protects Controlled Unclassified Information (CUI). It applies to organizations handling sensitive government data and has been widely adopted as a best practice...
Ditch passwords. Trust certificates. Secure Wi-Fi starts here.
Your Guide To Wi-Fi Security
Wi-Fi is now a necessity. However, its convenience also makes it a prime target for cyber threats. As the number of Wi-Fi-enabled devices skyrockets, so do security risks. Attackers exploit...
Stop hackers midstream—block MITM with EAP-TLS.
How Does a Man-in-the-Middle (MITM) Attack Compromise Wi-Fi Networks?
A MITM happens when attackers hijack a communication channel to intercept and steal data. In this type of attack, they position themselves between a user and an application, silently capturing...
Not every Wi-Fi is your friend - trust certificates, not signals.
What is an Evil Twin attack in Wi-Fi, and how can I protect against it?
Free Wi-Fi has made it easier than ever to stay connected on the go, but it has also opened the door to a range of Wi-Fi hacks. By creating fake...
One-time keys, zero chances for attackers.
Dynamic SCEP vs. SCEP: Securing Certificate Enrollment
Simple Certificate Enrollment Protocol (SCEP) streamlines secure certificate issuance across networked devices, enabling scalable authentication and encryption. Instead of relying on manual provisioning, SCEP automates the process, allowing devices to...
MAC spoofing is easy. Breaking certificates isn’t.
What is MAC spoofing, and how does it affect Wi-Fi security?
MAC spoofing is when an attacker tricks a network by faking a device’s unique ID (MAC address) to gain unauthorized access or disrupt communication. This attack can happen in different...
Stronger Okta security: verify every device, every time.
Enabling Okta Device Trust for any MDM
The traditional network perimeter is a relic of the past. With remote work now common, users need secure access from anywhere, making outdated security models ineffective. Relying on perimeter-based defenses...
Entra ID + Cloud RADIUS = Passwordless Wi-Fi Security.
Can I Use Azure With A RADIUS Server?
Organizations worldwide are making the transition to cloud-based network solutions. To ease the transition, Microsoft created Entra to aid clients in moving their directories from on-premise Active Directory (AD) to...
No certificate check? Your ‘secure’ Wi-Fi isn’t secure.
Without Server Certificate Validation, WPA2-Enterprise Isn’t Secure
Your users have strong, unique passwords, your networks are protected with WPA2-Enterprise encryption, and you use 802.1x for authentication. WPA2-Enterprise is the gold standard when it comes to security, so...
Kandji + SecureW2: Simple, secure SCEP.
How to Configure Kandji SCEP Profile
Digital certificates have, time and again, proven to be more secure than credential or password-based authentication as they are phishing-resistant. However, manually distributing digital certificates is a considerable challenge for...
Stronger security, no extra hardware required.
What Are Virtual Smart Cards?
Smart cards are increasingly important in the world of authentication cybersecurity. A smart card, like those produced by Yubico, is a cryptographic tool that allows users to securely authenticate their...
Integrity from SHA-2, efficiency from ECC - the future of certificates.
SHA-2 vs ECC: Digital Certificate Encryption Advancements
Cryptographic systems are at the heart of digital certificates, enabling encryption, authentication, and integrity. SHA-2 and ECC are two pivotal technologies that protect everything from SSL certificates to system integrity...
No more password resets, just seamless certificate access.
MSCHAPv2 Security Risks and Alternatives
Organizations need wired and wireless (Wi-Fi) connections to perform important business functions, but these connections are susceptible to various ever-evolving cyber threats. As a result, many ways of protecting networks...
NaaS scales. SecureW2 secures.
Network-as-a-Service (NaaS): Explained
Network as a service (NaaS) is a cloud delivery model where organizations consume networking infrastructure — connectivity, routing, security, and management — as a subscription instead of owning and operating...
Eliminate Jamf certificate errors before they happen.
[Solved] Jamf Casper Certificate Error
Apple devices and gadgets have been unparalleled in cutting-edge technology and customer satisfaction over the years. In a recent interview, the CIO of Jamf Linh Lam predicted Apple to reach...
WPA3 secures more, if your devices can keep up.
Wi-Fi Protected Access 3: Guide to WPA3
WPA (Wi-Fi Protected Access) was created in the early 2000s when IT professionals quickly realized that WEP (Wired Equivalency Protocol) had terrible security vulnerabilities. WPA2 was ratified in 2004 as...
Eduroam + RadSec = Safe Roaming.
Is RadSec Necessary for Eduroam?
Students and staff who visit other colleges and universities frequently encounter challenges accessing safe Wi-Fi networks. Without an integrated system, they may encounter connectivity challenges, different login procedures, or concerns...
One simple reconfiguration can fix your AD CS error.
Solved: Error “Cannot Manage Active Directory Certificate Services”
Admins configuring Active Directory Certificate Services (AD CS) for their network may encounter the following error message: Cannot manage active directory certificate services. The system cannot find the file specified:...
Secure every login and entry point with PIV-backed MFA at scale.
What Is Personal Identity Verification (PIV)?
What Is PIV? Personal Identity Verification (PIV) is a U.S. federal security standard that uses smart cards and X.509 digital certificates to authenticate employees and contractors before granting access to...
Secure your network — stop DNS attacks before they reach your users!
What is DNS Poisoning? How to Prevent DNS Spoofing Attacks
A 2023 survey from Efficient IP revealed staggering statistics: 90% of organizations were victims of DNS attacks in 2023, and the average cost of an attack was $1.1 million. 30%...
Seamless Wi-Fi, powered by Passpoint and 802.1x.
Passpoint Secure Wi-Fi: Definition and Benefits
Public Wi-Fi is a known attack surface. Open networks expose users to rogue access points, man-in-the-middle interception, and credential theft. Passpoint secure Wi-Fi, also called Hotspot 2.0, was built to...
Encrypt smarter: Only the right eyes should read your data.
All that You Need To Know About Public Key Encryption
Wireless security has never been more critical. In the United States alone, the FBI received over one million cybercrime complaints in 2025, for a total of nearly $21 billion in...
Upgrade your network security, move from NPS to cloud-native RADIUS!
Drawbacks of NPS in a Cloud Environment
Organizations want different technologies to work well together and integrate smoothly so they can be used more efficiently. The combination of Microsoft Azure and Network Policy Server (NPS) frequently generates...
Stop risking breaches: SHA-2 is the safe path forward.
Why is It Safe to Migrate AD CS from SHA-2 to SHA-1 In 2024?
It’s imperative for organizations to fully switch from SHA-1 to SHA-2. The National Institute of Standards and Technology (NIST) stated SHA-1 should not be trusted, PCI Compliance scanners no longer...
From inbox to recipient, S/MIME keeps every message secure.
Why Do You Need S/MIME Encryption In Network Security
S/MIME stands for “Secure/Multipurpose Internet Mail Extensions”. It’s an IETF standard for public key encryption and creating a digital signature for MIME data. In essence, S/MIME uses a PKI to...
Upgrade to WPA2: Stronger Wi-Fi security, smarter authentication.
WPA vs WPA2- The Better Wifi Authentication
Wireless networks are omnipresent. You may have access to many wireless networks, whether in a neighborhood coffee shop, a school, or home. However, it’s hard to tell which ones are...
Roam safely with RadSec and certificates.
How To Use RadSec For A Secure Roaming Network
RadSec is an 802.11x protocol designed to securely transfer information from a RADIUS through TCP (Transmission Control Protocol) and TLS (Transport Layer Security) for protected communications. At a basic level,...
Cloud RADIUS + AD = hassle-free, secure Wi-Fi.
How to Use Active Directory Set-up For Wi-Fi and CloudRADIUS
Organizations that leverage Microsoft Active Directory (AD) often want to connect their core user identities to their Wi-Fi network. The goal is to enable users to authenticate uniquely to the...
Deploy Eduroam Safely Using EAP-TLS.
4 Best Practices For Eduroam Deployment
Scholars and students often visit different campuses for internships, seminars, conferences, and other events. Accessing secure Wi-Fi at foreign campuses has always been a challenge for these individuals who require...
Secure users instantly, Dynamic VLANs powered by certificates.
How to Configure Dynamic VLAN for EAP-TLS
Researching and implementing new cybersecurity technologies is a vital aspect of maintaining an effective network for your organization. But transitioning to more up to date security measures often comes with...
Instant Eduroam access. Zero passwords. Total security.
Benefits of Digital Certificates For Secure Eduroam Wi-Fi
Eduroam has become crucial for colleges worldwide, providing students and staff with seamless, cross-campus Wi-Fi connectivity. However, as more institutions use Eduroam as their principal Wi-Fi network, security and accessibility...
Don’t let long-lived certs become your next vulnerability.
Certificate Lifetimes – Is 20 Years Too long?
Over the last few years, software makers have begun cracking down on certificates that do not expire soon enough. Most browsers will reject any SSL certificate with a lifetime longer...
Secure your network: OAuth + ADFS ties identity to devices seamlessly!
Can I Use OAuth 2 With ADFS?
What is ADFS? Active Directory Federation Service (ADFS) is a software component developed by Microsoft to provide Single Sign-On (SSO) authorization services to users on Windows Server Operating Systems. ADFS...
Trust your devices before they trust your network.
The Importance of Device Attestation for Zero Trust
Here, you can learn the concepts of device trust and cryptographic principles of attestation in ensuring security of your organization.
Trust starts at the Root, secure every device with a single CA.
Adding a Trusted Root Certificate Authority to Group Policy Objects
Organizations that want the best in authentication security should look no further than certificate-based authentication. When compared to using credentials for authentication, it’s simply no contest. The two pillars supported...
Secure access instantly with magic links and certificates.
Passwordless Magic Link Authentication: Explained
Want to know how magic links work? Read on to know more about magic links other passwordless authentication methods for network security.
LDAP is old news—secure your network with certificates and cloud IDPs.
You Don’t Need LDAP for 802.1X Anymore
Without protection, your organization’s network is vulnerable to cyber attacks. The 802.1X protocol heightens network security by introducing RADIUS servers for authentication, and Lightweight Directory Access Protocol (LDAP) has commonly...
MFA + Certificates: Double the Defense, Zero the Hassle.
Using Multi-Factor Authentication for Network Security
Many inquiries that we receive reference Multi-Factor Authentication (MFA) and how it can be used to improve the network security. MFA is a process that requires more than one form...
Trust nothing until you verify—stay ahead with real-time certificate checks.
How to Check if a Digital Certificate is Revoked
A critical component of EAP-TLS certificate-based authentication is properly managing certificates, which includes confirming that they have been properly revoked AND placed on the list of revoked certificates so the...
Access smarter, not harder - secure networks start with devices.
How to Set up Device Identification in Defender for Cloud Apps
Want better visibility and control on all devices in your network for efficient device management? Try Defender Device Management with us.
Seamless, secure Wi-Fi roaming across all devices.
Which Devices Support Passpoint and OpenRoaming?
OpenRoaming & Passpoint Wi-Fi makes the use of mobile devices on the go more secure. Find out what devices and OS support Passoint.
Windows Hello, powered by certificates.
Expanded Windows Hello for Business + Yubikey Login
SecureW2 has developed two solutions that offer major functionality upgrades to Windows Hello for Business: A Yubikey Management Solution that allows you to use your Azure AD or AD directory...
Beat Samsung’s Deep Sleep and stay connected, always.
(Solved) Android 11 Samsung “Deep Sleep” Wi-Fi Connectivity Issue
Android devices have long had an “app sleep” feature designed to reduce power usage for infrequently used apps, and it’s not a new problem that it can cause apps to...
Move from NPS headaches to seamless cloud authentication.
What is Microsoft NPS?
Microsoft Network Policy Server (NPS) is an on-premises network security tool for Windows Server that centralizes network regulations, user identities, and authorization protocols. As organizations increasingly use cloud computing, integrating...
One key, one certificate, total VPN security.
How to Use Yubikeys for VPN
Yubikeys are a useful and secure tool for protecting yourself from data theft. They add a layer of authentication and can be used with other authentication methods to further protect...
Secure networks made simple.
FreeRADIUS vs. Cisco ISE
Cyber-attacks cost small businesses an average of $84,000 to $148,000, and 60% of those attacked go out of business in 6 months. As organizations continue to grow, it becomes more...
Zero Trust starts with knowing who, or what, is connecting.
Device-Based vs User-Based RADIUS Lookup
If all the users in your network fit into one single group, RADIUS authentication would be simple. Alas, things aren’t that easy; administrators often find themselves needing to specifically distinguish...
Shared passwords fail. Certificates never do.
WPA2-PSK is Not Good Enough
In this day and age, employees are accessing their corporate resources wherever they can get a strong wireless signal, whether it be a public hotspot, an airport, or a friend’s...
Stop relying on NTLM. Start trusting certificates.
Why NTLM Authentication is Vulnerable
One of the biggest problems with Windows environments is the insistence to continue to build upon older systems despite the emergence of cloud solutions. Attackers can easily gain access to...
Secure every connection with PEAP and EAP-TLS.
What Is PEAP? Protected Extensible Authentication Protocol
Today’s networks handle an enormous volume of transactions and communications. As an ever-increasing amount of sensitive personal data flows across these networks, securing your connection is more critical than ever....
Leave passwords behind, go certificate-first!
A Security Analysis of WPA-Personal
In the continuous effort to strengthen wireless network security, Wi-Fi Protected Access (WPA) represents a significant turning point. Data transmission over airwaves is becoming increasingly common in the ever-expanding digital...
Intune or MobileIron? The right choice secures your future.
MobileIron vs MEM Intune: Top MDMs Compared
Remote work and hybrid workplaces are the new normal, making mobile devices ubiquitous in enterprise settings. Mobile devices improve employee productivity and efficiency — but they also make organizations vulnerable...
Every secure connection begins with a trusted root.
What is the Trusted Root Certification Authorities Store?
A Certificate Authority (CA) is the entity that handles the certificate distribution for a PKI. Certificate Authorities assist in validating the identities of different websites, individuals, and devices by providing...
Stop rotating passwords, start eliminating them.
Does Rotating Preshared Keys Improve Security?
Wifi Protected Access 2 – Pre-Shared Key (WPA2-PSK), a wireless security standard from 2004, is still used by many organizations today. And although it’s safer than its predecessors, WPA2-PSK relies...
Assume breach. Enforce Zero Trust everywhere.
Designing a Zero Trust 802.1x Network
Network security has traditionally focused on keeping threats out, with less attention on what happens once something gets through. Zero trust changes that. Zero-Trust 802.1X networks are built on continuous...
Compare OCSP and CRLs to see why modern PKI deployments favor CRLs.
OCSP vs CRL: The Best Bet To Revoke Certificates In A PKI
Online Certificate Status Protocol (OCSP) and Certificate Revocation Lists (CRLs) are different methods of verifying certificate status. While they have similarities, the modern choice between OCSP vs. CRL is clear:...
Stop resetting passwords. Start trusting certificates.
Passwords vs. Digital Certificates For RADIUS Authentication
Businesses understand the importance of passwords for private data security but might not realize that using a network with passwords poses many security threats. As hacking techniques become more advanced,...
Extend Zero Trust to Wi-Fi: YubiKeys + EAP-TLS.
Deploy Yubikeys For Secure Wi-Fi in WPA2-Enterprise Network
Security keys are useful tools for hardening your devices with an additional factor of authentication. Did you know that same protection can be extended to your network? SecureW2, a Yubico...
Stop bending certificates to fit AD. Secure them the right way.
A Guide To Client Certificate Mapping In Active Directory
Certificate mapping, in a general sense, refers to the tying of an identity to an X.509 digital certificate. In practice, the term is mostly used in the context of Microsoft’s...
Future-proof your Wi-Fi with EAP-TLS.
Is EAP-TLS Safer than PEAP-MSCHAPv2 in 2024?
The short answer is: Yes. Organizations that are interested in moving from the unsecure PEAP-MSCHAPv2 protocol to the superior EAP-TLS protocol might be worried about huge infrastructure overhaul or the...
WPA2-Enterprise made simple, secure, and automatic.
Configuration Guide For WPA2-Enterprise On Operating Systems
Automation is critical for a positive user experience; the faster a monotonous task can be finished, the more time users can focus on important activities. Network authentication can operate the...
Turn your Yubikey into a powerhouse of certificate security.
A Guide To Configure Certificates In Your Yubikey PIV Slots
Physical security tokens like the Yubikey have smartcards that can be configured to store several certificates, the quantity of which depends on the specifications of the secure cryptoprocessor at the...
Certificates don’t last forever. Renew early, secure always.
How To Renew SSL and Client Certificates For Secure Network
Automate certificate distribution and lifecycle management with industry best managed PKI solution. Continue reading to know more.
802.1X + Cloud RADIUS: The missing security layer for Office 365.
Configure 802.1X Authentication with Microsoft Office 365 Suite
We are living in an age where basically every person has an online footprint, whether it be for entertainment or to conduct business. Since millions of people are taking their...
Your 2008 RADIUS can’t defend today's threats.
Configure RADIUS on Windows Server 2008
The name RADIUS needs no introduction whenever you imagine a wired or wireless authentication server. Commonly referred to as AAA servers, RADIUS performs the core task of Authentication, Accounting, and...
Still using WEP? Lock it with WPA3 + certificates.
What Is Wired Equivalent Privacy (WEP)? | Wi-Fi Security Guide
Wireless networks simplify numerous business procedures while providing trustworthy security. WEP Wi-Fi encryption was the first attempt at securing wireless networks — and it failed. Wired Equivalent Privacy (WEP), introduced...
Stop MITM attacks before they even start.
Preventing Man-in-the-Middle (MITM) Attacks: The Ultimate Guide
A man-in-the-middle (MITM) attack is an incredibly dangerous type of cyber attack that involves a hacker infiltrating a private network by impersonating a rogue access point and acquiring login credentials....
The strength of your PKI is only as strong as your private key storage.
Best Practices for Storing X.509 Private Keys
X.509 certificates play a crucial role in guaranteeing the authenticity and integrity of communications. However, organizations that rely on the security provided by certificates also need to address a concern:...
When NPS falls short, Cloud RADIUS takes you further.
Is there an Alternative to Windows NPS?
Microsoft’s Network Policy Server (NPS) is a AAA RADIUS server used for a number of different types of network connections. It can be used for wireless authentication, VPN connections, dial-up,...
Seamless Wi-Fi roaming made secure with OpenRoaming and Passpoint.
What’s the Difference between OpenRoaming and Passpoint?
Advances in Wi-Fi infrastructure are coming at a rapid-fire pace these past few years, and it’s a little difficult to keep up. Some of the most exciting news has been...
Smart SCEP deployment = zero-trust made simple.
SCEP Security Best Practices
Simple Certificate Enrollment Protocol (SCEP) has been around for decades, and it continues to be the default choice for many IT and security teams managing digital certificates in enterprise environments....
From complex on-prem setups to simple cloud power.
Windows RADIUS Server Pros and Cons
There are thousands of deployed instances of Windows RADIUS Server across the world, but users still debate its capabilities to keep their large networks intact and secure, giving rise to...
Master AD CS Policies: Enforce Security the Right Way.
Guide to AD CS Policies and Enforcement
What is AD CS Used For? Active Directory Certificate Services (AD CS), a Windows server software solution, is used for issuing and managing x.509 digital certificates and provides Active Directory...
5 NAC Best Practices Every Enterprise Must Follow.
5 Network Access Control (NAC) Best Practices
What Is a NAC Solution? A Network Access Control, or NAC solution enforces security policies on devices that attempt to access a network, increasing network visibility and reducing risk. NAC...
The API Powering Secure Keys and Certificates
What is PKCS11?
High-profile data breaches from major organizations such as Equifax, Solar Winds, and even the White House have pushed network security into the forefront of the public eye. One method of...
Enterprise-Grade Security with Let’s Encrypt: What Works, What Doesn’t.
Can I Use Let’s Encrypt for an Enterprise?
When it comes to accessible Certificate Authority (CA) solutions that are easily available and free, Let’s Encrypt is second to none. They’ve enabled countless people and organizations to enable certificate-based...
Step-by-Step Guide: Configure Azure AD CBA with Ease
How to Configure Azure AD CBA
With the introduction of Azure AD CBA, Microsoft has taken steps to move past using passwords - and your organization can, too.
Enable RADIUS MAC Auth Bypass for Seamless IoT Connectivity.
Enabling RADIUS MAC Auth Bypass for IoT
Enabling RADIUS MAC Auth Bypass for IoT devices can alleviate cyber threats and help improve your network security. Here's How
The Complete Guide to Setting Up Microsoft Defender App Control.
Setup Microsoft Defender for Cloud Conditional Access App Control
Managed PKI solution for Microsoft Defender for Cloud Conditional Access App Control
Is Your Coworking Wi-Fi Secure? Here’s How to Fix It.
Coworking Wi-Fi Security Best Practices: How to Protect Shared Networks
Coworking spaces are on the rise with the increase in the number of remote workers. Many organizations have moved towards coworking as the shared office model offers similar benefits as that of a...
5 Proven Ways to Stop iOS Wi-Fi Password Sharing Risks
5 Ways to Protect iOS Networks From Password Sharing Risks
If you are an Apple device user, you must know about the Airdrop feature, which lets you share files. You can also use the Airdrop feature to share your WiFi...
Struggling with Okta Certificate Errors? Here Are 3 Proven Fixes
Top 3 Ways To Troubleshoot Common Okta Certificate Errors
Okta is one of the leading Identity and Access Management (IAM) service providers for enterprises around the globe. Okta supports binding identities to digital certificates, but you might encounter one...
Step-by-Step Guide to Certificate Management in Google Workspace
Certificate Management Guide For Google Workspace
Google Workspace is one of the most common Identity Providers used by enterprises today. The Google ecosystem includes a number of easy tools organizations can use in their daily operation,...
Google Workspace Security: Complete Guide to Certificate Management
Attack Vectors That Leave Your 802.1X Network Vulnerable
When used correctly, 802.1X authentication is the gold standard for network security. However, even seasoned IT professionals fail to recognize some key points of attack. If they are left unchecked,...
Okta RADIUS Internal Server Error Explained: Causes & Fixes
Troubleshoot Okta RADIUS Internal Server Error
Okta is one of the leading Identity and Access Management (IAM) service providers for enterprises around the globe. They provide a great user experience, but sometimes you might encounter some...
Group Policy vs. Intune: Which Is Right for Your Organization?
Group Policy vs. Intune Profiles: A High-Level Comparison
Microsoft has many policy management tools to secure client devices in an organizational environment. Microsoft Group Policy and Intune Profiles are commonly used solutions in different environments, catering to different...
Step-by-Step Guide: Build Your Own PKI Certificate Authority
Guide: How To Build A PKI Certificate Authority
What is a Certificate Authority? A certificate authority (CA) is an entity that distributes digital certificates. A digital certificate certifies the ownership of a public key by tying it cryptographically...
JAMF vs. Mosyle: Which Apple MDM Fits Your Organization Best?
Compare Apple MDMs: JAMF vs. Mosyle
Apple devices are becoming increasingly popular for enterprises as they are feature-rich and user-friendly. Over 81% of employees use company-owned or BYOD Apple devices to access their corporate network, which...
Step-by-Step Guide: Configure Okta Client Certificate Authentication
Configure Okta Client Certificate Authentication
In this article, you can learn integrating digital certificates with one of the leading identity providers, Okta.
Enterprise Wi-Fi security and the truth about WPA2 password safety
What Is a WPA2 Password and How Does It Improve Security?
When you try to connect to a Wi-Fi network and are asked for a password, do you ever find it hard to figure out what to do? You’re not alone....
EAP-TTLS/PAP in 2024: Why This Legacy Protocol Isn’t Safe Anymore
Why is EAP-TTLS/PAP Not Safe in 2024
When designing a new network, there are countless features to consider that significantly impact the organization at large. Few functions of the network impact users more than the authentication method...
Step-by-Step: Configure Microsoft GPO with RADIUS Authentication
Configure Microsoft GPO with RADIUS Authentication
Integrating Microsoft’s Group Policy Object (GPO) with RADIUS authentication effectively improves network security and access control. GPO enables administrators to apply policy settings for specific user groups, ensuring that individuals...
Deploying Microsoft NPS in the Cloud: What You Need to Know
Can I Set Up Microsoft NPS in the Cloud?
Microsoft Network Policy Server (NPS) is Microsoft’s AAA RADIUS server. It authorizes and authenticates users and devices for network connections. NPS is an on-premise RADIUS server and uses the Active...
TLS Authentication Explained: A Complete Guide
Guide: TLS Authentication and How It Works
The essence of Transport Layer Security (TLS) requires understanding two key concepts: encryption and authentication. While encryption ensures that the data transmitted between your browser and the web server is...
X.509 Digital Certificates Explained: Everything You Need to Know
X.509 Digital Certificates Explained
In order to run a certificate-based network, admins need to understand how to create and configure X.509 certificates. X.509 is a cryptography standard for defining a public key certificate. X.509...
On-Premise vs. Cloud PKI: A Deep Dive for Windows Environments
Analysis Of Windows On-Premise vs. Cloud PKI Servers.
The definition for a Public Key Infrastructures (PKIs) varies among cyber security professionals, but is generally considered a collection of components that give everything an organization needs to issue and...
MAC Auth Bypass in 802.1X Networks Explained
MAC Auth Bypass In 802.1X Network: An Overview
A look at how RADIUS MAC Auth Bypass and MAC Address Filtering can help secure and manage your IoT devices.
Server Certificate Validation in Android 13 Explained
An Overview of Server Certificate Validation in Android 13
Integrating the capabilities of two leading operating systems, Android and Windows, have been a dream for most tech-savvy enthusiasts across the globe. Microsoft is going to offer this upgrade by...
Step-by-Step Guide: Configure Passpoint/OpenRoaming on Android
Configuring Passpoint/OpenRoaming on Android
For individuals who possess an Android mobile device, the significance of Wi-Fi connectivity to their gadget is widely recognized. In addition to cost savings, utilizing this method yields faster data...
Enforce Secure Access: Build Network Policies with Intune Compliance
How to Create Network Policies Based on Intune Device Compliance
Intune's device compliance attribute is a powerful tool for managing the devices on your network. Here's how you can turn it into a robust network policy with SecureW2.
RADIUS Authentication with YubiKeys: Is It Possible?
Can you Authenticate RADIUS with YubiKeys?
As YubiKeys achieve widespread adoption, the industry keeps finding more and more uses for the powerful little device. One of the more interesting use cases for YubiKey is AAA/RADIUS authentication....
8 Top IAM Platforms Every Enterprise Should Know
8 Top IAM Platforms
Every device that connects to your network, every user who logs in to an application, and every service account running in the background represents an identity your organization needs to...
Managing Your CA the Right Way: Proven Best Practices
Best Practices for Certificate Authority Management
An ever-growing trend in authentication cybersecurity is the replacement of credential-based authentication with certificates. Credentials are simply incapable of protecting a secure network. According to the 2019 Verizon Data Breach...
AD CS Exploits: Risks in Certificate & Security Configurations
AD CS Certificate and Security Configuration Exploits
Active Directory Certificate Services (AD CS) is a critical platform in cybersecurity, providing infrastructure for managing certificates within an organization. At the heart of AD CS lies the Public Key...
Do RADIUS Servers Use Active Directory? Here’s the Answer
Do RADIUS Servers use AD?
Do you know what facilitated back-office IT functions for any business twenty years ago? It was Active Directory, Microsoft’s user directory system. Because Active Directory simplified the task for organizations to...
Understanding the Certificate Life Cycle in 4 Key Stages
The Four Stages of a Certificate Lifecycle
Digital certificates are electronic credentials that are used to authenticate the identities of individuals or devices using a particular network. It’s helpful to think of certificates with similar functionality as...
Learn how TLS encryption secures data in transit and protects against interception.
What is Transport Layer Security (TLS)? TLS Encryption
Learn how TLS encryption works, the handshake process, and how it secures data in transit.
Streamline Wi-Fi onboarding with captive portal best practices.
Wi-Fi Onboarding Captive Portal Best Practices
Accessing Wi-Fi networks easily and remotely has become an important interaction point between organizations and their remote users. The captive portal is at the center of this process. It is...
Choosing the Right NAC Solution: Cisco ISE vs. Aruba ClearPass
Cisco ISE vs. Aruba ClearPass: NAC Comparison
When comparing Aruba ClearPass and Cisco Identity Services Engine (ISE), IT teams face a decision that will affect network security architecture for years. The rise in remote work has driven...
Struggling with SCEP? Here’s How to Solve Common Errors
Troubleshooting Common SCEP Errors
The Simple Certificate Enrollment Protocol (SCEP) automates certificate distribution to issue and manage network certificates for users and devices securely. The SCEP protocol addresses certificate enrollment without any intervention by end users....
Choosing the best Apple MDM: Jamf or Intune?
Jamf vs. Intune: Best MDM to Manage Apple Devices
The rise in hybrid work culture has increased the usage of mobile devices such as smartphones and tablets for corporate purposes. Efficiently managed devices are critical in maintaining a solid...
A Deep Dive into Certificate Pinning: Obstacles and Options
A Comprehensive Review of Certificate Pinning: The Challenges and Alternatives
While digital certificates undoubtedly provide a more secure authentication method than passwords, some organizations still fear the possibility that certificates can be issued to unauthorized parties. Certificate pinning is a...
WPA2-PSK security explained: strengths, weaknesses & risks
A Deep Dive into the Security of WPA2-PSK
In Wi-Fi security, one protocol stands out for its widespread adoption and significant role in protecting data: WPA2-PSK. This protocol, short for Wi-Fi Protected Access 2 – Pre-Shared Key, has...
Can You Use Certificates for SSO? The Complete Breakdown
Can You Use Certificates for Single Sign-On (SSO)?
Forgetting your password is one of the worst things about the internet. Unfortunately, it is encouraged to create complex passwords, making remembering them more difficult. Consequently, a considerable number of...
From Authentication to Encryption: How WPA-Enterprise Protects You
How Does WPA-Enterprise Secure Your Network
Securely authenticating network users is a fundamental aspect of network security and is the source of significant challenges for many network administrators. Authentication security has never been more important; In...
How to Troubleshoot and Solve NPS Error Code 66 in Meraki
How To Solve the NPS Error Code 66 in Meraki?
The RADIUS server plays a vital role in the authentication within a network infrastructure. NPS (Network Policy Server) is Microsoft’s own RADIUS solution that performs a similar role of filtering...
How to test for MITM attacks and strengthen network security
How To Test MITM Attacks And Protect Networks
A man-in-the-middle (MITM) attack is a highly effective type of cyberattack that involves a hacker infiltrating a private network by impersonating a rogue access point and acquiring login credentials. MITM...
Troubleshooting macOS AD Bind Problems After Microsoft Kerberos Updates
MacOS AD Bind Issues Post Microsoft Kerberos Update
On October 11th, 2022 Microsoft pushed an update to enforce domain controller validation for Active Directory. The purpose of this update is to shore up a security bypass vulnerability that...
Smart Cards 101: Secure Identity Authentication and Access Management
Smart Cards for Identity Authentication and Access Security
Smart cards, occasionally called chip cards or integrated circuit cards (IC or ICC), are a broad family of physical electronic authentication devices. More practically, they’re physically-secured microprocessors used to control...
Comprehensive List of Devices Supporting 802.1X Authentication
List of Devices Supporting 802.1x
It is hard to imagine life without Wi-Fi, both in personal or professional spaces but we can not deny that it has parallelly caused the transmission of more and more...
ACME vs. SCEP: Why Apple Recommends the Modern Approach
Why Apple Wants You to Use ACME vs. SCEP
In this article, we will discuss the latest ACME protocol that you can use for your iOS devices for a smooth transition to digital certificates with minimum effort.
LDAP Authentication with Azure AD: A Complete Guide
LDAP Authentication with Azure AD
LDAP (Lightweight Directory Access Protocol) authentication can confirm user identities across a network. It uses a centralized directory system for user authorization and authentication. On the other hand, Microsoft offers...
Phishing-Resistant MFA in Azure AD: What You Need to Know
Understanding Phishing-Resistant MFA in Azure AD
On an average day, most employees have to log into numerous different applications and resources at work. The influx of applications necessary for work has led to an exponential increase...
Step-by-Step Guide: How to Generate Root and Intermediate CAs
How to Generate Root & Intermediate CAs
With 10 million attacks targeting usernames and passwords occur every day. it’s not a bad idea to drop passwords wherever possible. A proper PKI allows your network to utilize certificate-based...
Windows Defender Credential Guard & PEAP MS-CHAPv2 explained
Windows Defender Credential Guard and PEAP: What to Know
Starting with Windows 11 22H2, Microsoft enabled Credential Guard by default on Enterprise and Education devices. If your organization uses password-based 802.1X authentication for Wi-Fi or VPN, this is a...
FreeRADIUS with Google LDAP: How Does it Work?
FreeRADIUS with Google LDAP: How Does it Work?
Is an authentication system built around FreeRADIUS with Google LDAP more economical? Learn the truth about this setup here.
Understanding RSA: The Fundamentals of Asymmetric Encryption
RSA Encryption: How the RSA Algorithm Works and Why It Matters
RSA encryption is one of the most widely used cryptographic systems in the world. Named after its creators — Ron Rivest, Adi Shamir, and Leonard Adleman, who introduced the algorithm...
PEAP-MSCHAPv2 Vulnerability Explained: How Credentials Can Be Compromised
Understanding MSCHAP Vulnerabilities on Your Network
In 2013, Microsoft released a report of a known security vulnerability present within PEAP-MSCHAPv2 Wi-Fi authentication. This authentication protocol is a widely supported standard and can be exploited using this...
Android Network Settings Explained: The Complete 2024 Guide
2024 Guide to Android Network Settings
Android network settings are critical for ensuring a seamless connectivity and security for users. These settings cover a variety of parameters controlling VPN connections, mobile data, and Wi-Fi, among other...
Google Workspace MFA Made Easy: A Practical Setup Guide
How to Enable MFA for Google Workspace
Cyber-attacks are becoming more sophisticated, with hackers exploiting every available option to infiltrate your network. One-step authentication methods, such as using a login ID and password, are no longer enough...
Troubleshooting Common Okta Sign-In Errors: Step-by-Step Guide
Troubleshooting Commonly Encountered Okta Sign-In Errors
Okta is one of the leading identity and authentication platforms compatible with both cloud and on-premise directories. They provide a great user experience, but sometimes you might encounter networking errors...
Understanding the Differences Between User and Device Certificates
High Level Comparison Of User Certificate vs. Device Certificate
The popularity of digital certificates has been soaring day by day with the advancement of cloud technology. It has already replaced the traditional usage of credential-based protection in various IT...
Internal vs. External CA: Which Is the Best Choice for Your Organization?
Internal Or External CA- The Best Bet For Your Organization?
Public Key Infrastructure (PKI) is widely used by organizations to secure communications among servers and clients using digital certificates and certificate authorities (CA). Certificates are a combination of cryptographic keys...
SHA-256 vs. SHA-1: Which hashing algorithm provides better security?
What Is SHA-1 Encryption? SHA-1 vs. SHA-256 vs. SHA-512
Sending unencrypted information over open airwaves is a serious risk. Hackers are constantly developing new attack vectors to target sensitive data while it’s in transit. That’s why it’s important to...
RADIUS Certificate-Based Authentication on Google Workspace Made Easy
How To Enable RADIUS CBA On Google Workspace?
If the cybersecurity community could be compared to a court, the jury has reached its verdict: it’s time to move past outdated pre-shared keys as a means to network authentication....
RADIUS Certificate-Based Authentication Explained: A Complete Overview
An Overview Of RADIUS Certificate-based Authentication
With an increasing number of cybersecurity risks and the necessity for secured access to network resources, organizations are implementing various authentication methods. RADIUS certificate-based authentication is one of these techniques,...
MAC spoofing attacks explained: Understanding the threats to your network
What Is MAC Spoofing? Attacks, Prevention & Detection
New cyberattacks and breaches are reported every day in our news feeds. Cybercriminals target people as well as large corporations and other businesses. One of the many techniques hackers employ...
LDAP with Entra ID: Key Considerations for IT Admins
Does LDAP work with Entra ID? Yes and No
To make a long story short: Microsoft offers the ability to sync Azure AD (Microsoft Entra ID) with an LDAP server, which can suffice as a short-term solution. This means...
Master Windows Access Control: Understanding ACL, DACL, SACL, & ACE
Windows Access Control Lists: ACL, SACL, DACL, & ACE
Read this to know more about access control list and its components and the best way to secure your enterprise network.
Struggling with NPS Reason Code 22? Here’s How to Fix It Quickly
How to Resolve NPS Reason Code 22
Remote Authentication Dial-in User Service (RADIUS) is integral to network infrastructure, especially for authentication, authorization, and accounting (AAA) purposes. NPS (Network Policy Server) is Microsoft’s RADIUS server, replacing its age-old...
Why Using NPS with Entra ID Can Cause Security and Compatibility Issues
Why You Shouldn’t Use NPS with Azure AD (Microsoft Entra ID)
Since cloud-based solutions are becoming the norm today, knowing how different identity and access management tools work together and what they do is important. This article details Microsoft NPS (Network...
Compare EAP-TLS and EAP-TTLS/PAP to understand the security tradeoffs between certificate-based and passw...
What Is EAP-TTLS?
This guide compares EAP-TLS and EAP-TTLS/PAP authentication methods used in enterprise Wi-Fi security. Learn how certificate-based authentication differs from password-based methods, the risks of PAP authentication, and why organizations often...
What is NAS-ID? Understanding Network Access Server Identifiers
What is NAS-ID?
The Network Access Server (NAS) is the frontline of authentication – it’s the first server that fields network authentication requests before they pass through to the RADIUS. The NAS Identifier...
Secure Your Network: How to Configure RADIUS on Windows Server 2016
How to Configure RADIUS on Windows 2016: A Detailed Guide
A WPA-2 Enterprise network is incomplete without a RADIUS server, thanks to its triple role of Authentication, Accounting, and Authorization (AAA). Any robust network security demands all three functions for...
Here's All That You Need To Know About Easy, Secure Onboarding for BYODs.
What to Expect When You’re Adopting the JoinNow Platform for BYODs
If we were to define our platform briefly, we’d say that SecureW2 makes it easier to transition to passwordless security by providing an easy Public Key Infrastructure (PKI) and RADIUS...
A Concise Guide to Our PKI Solution for Managed Devices.
What to Expect When You’re Adopting the JoinNow Platform for Managed Devices
In a nutshell, SecureW2 helps organizations achieve passwordless network access by providing a managed Public Key Infrastructure (PKI) and RADIUS service. These two core products work together to empower wired...
With EAP-TLS, You Can Deploy Certificates For Identity-Backed Authentication.
EAP-TLS Explained: How It Works and Why It’s Secure
Extensible Authentication Protocol–Transport Layer Security (EAP-TLS) is an IETF open standard defined in RFC 5216. More colloquially, EAP-TLS is the authentication protocol most commonly deployed on WPA2-Enterprise networks to enable...
RADIUS Centralizes Access Control With Digital Certificates On A WPA2-Enterprise Network.
A Complete Guide to Configuring RADIUS on Windows 2019
The term “RADIUS server” will probably be mentioned at some point in any conversation regarding wired or wireless authentication. Within a WPA-2 Enterprise network, RADIUS (also referred to as a...
Learn how to configure the Microsoft RADIUS server by adding NPS roles, RADIUS clients, and authenticatio...
A Complete Guide to Configuring Microsoft RADIUS Server
Need a solution for your network authentication, authorization, and accounting (AAA) requirements? RADIUS has been around for decades and is used by thousands of organizations. Without a RADIUS server, authentication...
Segment Managed Devices, Guests and IoT s Into VLANs For A Secure Network.
Network Segmentation Best Practices
VLANs are a great way to increase security because they reduce the risk of threats spreading throughout the network. A threat can quickly move around the network if users/devices are...
Secure Logins with Certificate-Based Smart Card Authentication In AD.
Smart Card Authentication with Active Directory
Chances are, your work requires you to have logins and passwords for multiple resources. On top of that, you probably have to update your password regularly, ensuring that each new...
Set up a PKI to issue identity-bound certificates to devices and users.
How to Build and Set Up Your Own PKI
A Managed Public Key Infrastructure (PKI) is a vital part of any comprehensive network security strategy. It allows you to use digital certificates for authentication, a form of credential that’s...
Mutual Server Validation Connects Android Clients to The Correct Servers.
Server Certificate Validation with Android 12 Devices
Cyber-attacks have grown stronger over the years and are able to easily bypass the rudimentary security standards provided by the username/password mechanism. If an organization relies on passwords for network...
Future-Proof your Network With WPA3 Encryption.
WPA3: The Ultimate Guide
Wi-Fi Protected Access (WPA) has evolved significantly since its inception in 1999. WPA2 replaced the original standard in 2004 and for years remained the benchmark for secure wireless networks, only...
Discover The Benefits of Using WPA2-Enterpise For your Home Wi-Fi.
WPA2 Personal vs Enterprise: Key Differences Explained
Securing home wireless networks has never been as important. An increase in remote work requires more people to handle sensitive business data at home. On top of this, our lives,...
See How EAP-TLS Compares To PEAP-MSCHAPv2 with Certificate-Based Authentication.
EAP vs PEAP: Which Authentication Protocol Is More Secure?
Ensuring network users can securely authenticate to the wireless network is paramount to the overall safety and security of your organization. So many attacks are aimed at exploiting the authentication...
Automate Certificates With SCEP For Easy Lifecycle Management.
How to Manage Certificates with Intune (MEM Intune)
Network administrators often feel certificate management to be challenging at times, especially in finding the right PKI for certificate deployment. They either end up paying for a pricey PKI...
Control And Monitor Data Effectively With RADIUS Accounting Practices.
RADIUS Accounting Best Practices
RADIUS is a crucial networking protocol best known for centralized authentication, authorization, and accounting (AAA) administration. The final “A” in AAA signifies accounting, a fundamental aspect of network management. Network...
Here Are Some Tips To Enhance AAA Server Security.
AAA Server Best Practices
An AAA server processes user requests for access to computer resources and provides an organization’s authentication, authorization, and accounting (AAA) services. The AAA server typically interacts with network access, gateway...
CNA Secures Access. A Reliable Onboarding Solution Makes It Seamless”
What Is Apple Captive Network Assistant?
Maintaining a safe connection is of the utmost importance in the hyper-connected world we live in today, where we use the internet for almost everything. Yet, the security of public...
Continuous Monitoring and Strong Authentication Make For Robust Network Security.
Network Security Basics—Definition, Threats, and Solutions
The increase in remote work, cloud computing, and integrated IoT devices leads to complexities of securing computer networks and network security infrastructures. The evolution of cyber threats—from sophisticated malware attacks...
Segregate Student From Staff Network To Protect Your Data From Unauthorized Access.
Using VLANS to Keep Students off the Staff Network
Keeping your students off the staff network is among the daily challenges IT administrators face monitoring their domain. Especially as we continue to integrate technology with education, many institutions are...
Beyond AD CS: Simplifying Certificate Management for Jamf-Managed Devices.
How to Set Up AD CS PKI Certificates with Jamf
As credential-based authentication becomes increasingly insecure, many organizations see the benefit of moving to passwordless security methods such as digital certificates. Implementing certificates, however, requires the implementation of a Public...
Monitoring Network Traffic Is Crucial To A Secure Network.
How to Monitor Network Traffic: Best Tips for IT Pros
Network traffic monitoring is essential for IT professionals to protect the company’s environment against potential vulnerabilities. It tracks data movement across different networks, ensures the network operates efficiently and identifies...
Automate Printer Security With 802.1X Authentication.
How to Configure 802.1x Printer Authentication?
When organizations establish their IT infrastructure, it’s essential to protect it, including network-connected devices and wired and wireless access points. Printers often fly under the radar among these devices regarding...
Automated PKI and CAC Management That Meets DoD Standards
How is a Smart CAC Card Used in A PKI?
Public Key Infrastructure (PKI) is one of the most robust methods for safeguarding sensitive information, particularly within the Department of Defense (DoD) ecosystem, where it secures sensitive data and communications...
Secure and Tamper-Proof Key Security With HSMs.
What is a Hardware Security Module (HSM)?
Data security has never been more critical. Hardware Security Modules (HSMs) are pivotal in safeguarding the cryptographic infrastructure of numerous global enterprises. HSMs have come a long way, from niche,...
Here are Some Best Practices To Secure Your Wi-Fi From Attacks And Unauthorized Access.
4 Ways to Secure Wi-Fi Connectivity
Wi-fi networks are ubiquitous as more and more users connect to networks remotely for work, access data and applications, and manage IoT devices. As their popularity grows, so do the...
Secure Your Network With Identity-Backed PKI Tokens
What is a PKI Token?
Today’s world relies heavily on online interactions, such as collaborating with family, friends, and colleagues on social media or checking our bank accounts. However, this ease of use raises security...
DoD PKI: A Comprehensive Overview
What is a DoD PKI?
The Department of Defence Public Key Infrastructure (DoD PKI) is a vital component in strengthening the Department of Defense’s (DoD) digital communications and data-sharing infrastructure. Fundamentally, DoD PKI is an...
Use Digital Certificates Instead Of PSK's For Identity-Backed Networks.
Mitigate the Risks of a Pre-Shared Keys-Based Network
Wi-Fi security is designed to safeguard data as it traverses the airwaves in wireless networks. Wi-Fi Protected Access (WPA) emerged as a response to the glaring deficiencies of its predecessor,...
A Cloud PKI Integration With AD CS Lets You Manage Network Access Efficiently.
Should I Install AD CS on Domain Controller?
IT administrators must decide on network security: should they install Active Directory Certificate Services (AD CS) on a Domain Controller (DC)? Microsoft PKI (Public Key Infrastructure) solutions are the cornerstone...
What you need to know about deploying our platform
Everything You Need to Know About SecureW2 Deployment
Relying on passwords alone to safeguard access to your resources (including Wi-Fi, applications, and email security) is no longer secure. Cyber attacks designed to harvest credentials become increasingly complex by...
PKI and Digital Certificates: What You Should Know
A Deep Dive into PKI Certificates
Corporate data, social media pages, applications, and user data are crucial assets of an organization, and any theft or misuse of these could lead to huge financial losses. They not...
What you need to know about Wi-Fi Protected Access
What Is WPA? Wi-Fi Protected Access Explained
The ubiquity of Wi-Fi networks in today’s world has made them popular targets for cyberattacks, especially if they rely on vulnerable mechanisms like passwords. In a 2021 study, security researchers...
Simplify Access and Secure Your Network with WebAuth Wi-Fi And Cloud IDPs.
Introducing WebAuth Wi-Fi with Cloud IDPs
It’s no secret that open Wi-Fi networks are infamously insecure, and Pre-Shared Key (PSK) networks aren’t much better. If you tie your organization’s Wi-Fi to a single password and more...
The Drawbacks of LEAP And The Case for EAP-TLS
LEAP Authentication and How It Works
Wi-Fi connection integrity is critical for organizations securing sensitive data or individuals protecting personal information. This requirement has created many authentication methods, each attempting to balance usability and security. LEAP...
2024 Security Analysis of PEAP-MSCHAPv2
These days, wired and wireless (Wi-Fi) networks are ubiquitous. Organizations need these connections to perform critical business functions, but these connections are susceptible to various ever-evolving cyber threats. As a...
EAP-TLS Is The Future of VPN Authentication.
How to Authenticate to VPN with EAP-TLS
In today’s world, VPNs (Virtual Private Networks) are very important for individuals and small and large-scale business owners. However, utilizing a VPN can be tricky due to some common difficulties...
EAP-TLS: The Gold Standard in Network Authentication
A Comprehensive Guide to the EAP Protocol in Networking
Network security is crucial in the modern digital world, where wireless communication is commonplace. Security risks such as unauthorized access, data eavesdropping, and network breaches can affect wireless networks. Because...
A technical comparison of WPA3 vs. WPA2, including authentication, encryption, and migration consideratio...
WPA2 vs. WPA3: Key Differences & Security Improvements
WPA2 and WPA3 differ in authentication methods, encryption strength, and resistance to password attacks. Learn how SAE, forward secrecy, and enterprise cryptography improve modern Wi-Fi security and how to migrate...
Automate Apple Device Security with Kandji and PKI
Kandji Enterprise Wi-Fi Profile Settings Guide
With a focus on centralized control of Apple devices, Kandji stands out as an innovative leader in modern enterprise management. IT managers can easily automate device deployment, enforce security policies,...
The MacOS Guide to Passwordless Wi-Fi
Best Wi-Fi Security Settings MacOS
In a world driven by digital connection, safeguarding the security of our Wi-Fi networks is critical, especially for Mac users. Despite its strong standing, the macOS environment is not immune...
Why X.509 Certificates are the Future of Security
What is an X.509 Digital Certificate?
X.509 certificates are forms of identification that leverage public-private key cryptography. They are a secure replacement for passwords.
Learn how man-in-the-middle attacks work and how certificate-based authentication prevents them.
What Is a Man-in-the-Middle Attack? Types, Examples, and Prevention
Learn what a man-in-the-middle attack is, how it works, and how to prevent it with strong authentication.
Simplify Chromebooks: Automated Certificate Enrollment with SecureW2
Configure Google SCEP Certificate Automatic Enrollment Profiles
Certificates are far superior to credentials and mitigate many vulnerabilities associated with pre-shared keys. They enhance the user experience by facilitating network access and removing password-related friction induced by password...
Your Guide To The Essential Role of Jamf Push Certificates
What is a Jamf Push Certificate?
Do you use Apple devices in your work infrastructure? Then you’ve probably heard of Jamf. Jamf Pro is one of the most robust and feature-dense solutions for managing Apple devices....
The Hidden Dangers of Public Wi-Fi and How to Fix It
Risk of Public Wi-Fi
Public Wi-Fi is any network other than your home or work network and is commonly found in places such as airports, malls, coffee shops, hotels, and restaurants. It allows users...
Secure Your Cloud With Continuous Access Evaluation For RADIUS
Configure Azure AD Continuous Access Evaluation for RADIUS
Continuous Access Evaluation (CAE) is an essential security feature in Azure Active Directory (Azure AD) that constantly monitors and evaluates user access to resources. Through CAE, Azure provides a proactive...
Unlock Device Trust with Azure and Digital Certificates
Configuring Azure AD CBA with Conditional Access Policies
Conditional Access policies, the if-then statements available in Microsoft Azure AD (Entra ID), enable a much more granular level of access control over the resources managed with Azure AD/Entra ID....
Beyond Passwords: The Power of Certificate-Based Authentication
What is Certificate-Based Authentication?
What is Certificate-Based Authentication? At its most basic, certificate-based authentication (CBA) uses a digital certificate based on cryptography to verify the identity of a person, computer, or other device before...
Why Your Does Organization Need Crypto Agility
What is Cryptographic Agility and Why Does it Matter?
Cryptography is a cornerstone of securing information systems. It involves encoding data to ensure only authorized parties can access it. By converting data into an unreadable format, cryptography protects sensitive...
The Complete Guide to SSL/TLS Certificates
What is Secure Sockets Layer (SSL)?
Security over the internet has drastically improved in the few decades that the internet has been widely available. The average user doesn’t realize how much goes on behind the scenes...
The Ultimate Guide to Device Trust & Intune
Invoking Device Trust with Intune as MDM
Imagine you are a parent working from home, and your child accidentally spills a drink on your work laptop. You have an approaching work deadline, so you finish it on...
The Dangers of AD CS Misconfigurations
AD CS: Domain Escalation Attack Scenario 1 (ESC1)
Active Directory Certificate Services (AD CS) is an essential tool for domain administrators to enhance network security, ensuring secure communication, code signing, and user authentication. Organizations can leverage the 802.1x...
Practical Security for Active Directory Certificate Services
Simple, Practical Security Guidance for AD CS
In 2008, Microsoft released the Active Directory Certificate Services(AD CS) feature to allow Administrators to manage their own Public Key Infrastructure and their Remote Authentication Dial-In User Service(RADIUS). This paved...
TLS 1.3 - Faster, Safer, and Smarter Communications
TLS (Transport Layer Security) Explained: Why TLS 1.3 is the New Standard
TLS 1.3 is the current version of the Transport Layer Security protocol, standardized in RFC 8446. It reduces handshake latency by 50%, removes outdated cipher suites, and mandates forward secrecy,...
The LDAP Security Problem and Its Cloud Solution
What Is LDAP Authentication and How Does It Work?
LDAP authentication verifies user identities against a centralized directory server. This guide covers how LDAP authentication works, its security limitations, and how organizations are replacing password-based LDAP with certificate-based network...
LDAP Injections: Why Input Sanitization is Not Enough
LDAP Injection Attacks: Explained
LDAP also known as Lightweight Directory Access Protocol, is an essential utility in network settings that facilitates getting hold of data about organizations, individuals, and resources. LDAP is commonly used...
Go Passwordless on Apple Devices with Jamf & RADIUS
Jamf RADIUS Server Best Practices
For small and medium-sized enterprises, coordinating employees’ iPhone, iPad, and Mac devices may distract you from your primary responsibilities. Jamf assists businesses in addressing this issue. The affordable cloud-based solution...
Beyond Passwords: The Guide to MDM Security
MDM Security Best Practices
In the current digital environment, the proper management and security of devices within organizations are of the utmost importance. Mobile Device Management (MDM) solutions enable organizations to manage “managed devices”...
PEAP vs. EAP-TLS: What You Need to Know
PEAP Exploit Explained
An enterprise needs a safe, secure, and proper network infrastructure implementation to ensure a functional business environment. The Protected Extensible Authentication Protocol (PEAP) is a form of EAP protocol used...
Stop Sharing Passwords. Secure School Wi-Fi.
Student BYOD Wi-Fi Security Solutions
School networks have expanded far beyond the computer lab — students, staff, and visitors now connect a wide range of personal devices to campus Wi-Fi from classrooms, dorms, and off-site...
802.1X: Secure, Simple, Scalable
802.1X Port Security Simplified
Did you know that the cost of data breaches reached a whopping $4.35 million in 2022? Data breaches cost organizations a lot in penalties and lost business opportunities. Almost 68%...
From Single Point of Failure to Passwordless Security
Are Password Managers Secure?
Everyone uses numerous accounts on the internet these days. Take yourself as an example; you most certainly have a minimum of one social network account, one email address, one for...
Why PSKs Fail Against Layer 2 Attacks
Layer 2 Attacks that Defeat PSK Networks
Move away from traditional PSKs to digital certificates and protect your network from Layer 2 attacks. Know more here!
From Wi-Fi to Cloud: Certificates Are the Bridge to Zero Trust
Why You Should Protect Your Local Area Network, Even if You’re Cloud-Based
Ensuring the security and integrity of a business’s data and network infrastructure is of utmost importance, and thus safeguarding the local network is imperative. The Wi-Fi network serves as the...
Why Passwordless Is the Future of Secure Access
What Is Passwordless Authentication?
Do you want to move to effective Passwordless authentication solutions? Read to find out how a robust passwordless solution can enhance your network's security.
Azure AD Certificate-Based Auth: The Next Step Beyond MFA
Securely Eliminate MFA with Azure AD CBA
Hackers acquired the personal data of over 37 million T-Mobile users, including names, dates of birth, Social Security numbers, and driver’s license information, in a recent incident that featured a...
See How Microsoft Defender Uses Certificates for Smarter Access Control
Using Certificates for Granular Application Access with Microsoft Defender
The cloud presents an enticing opportunity for businesses – it makes important resources available anywhere, allows them to offshore the cost of storage, and can even save them on hardware...
Microsoft NDES: Still Relevant or Time to Move On?
Microsoft Network Device Enrollment Service: Do You Need It?
In this article, we will discuss NDES, its importance in network security, and its benefits for managing devices in an enterprise environment.
Passwordless Authentication, Powered by Azure AD CBA
Implement Microsoft Passwordless Authentication With Azure AD CBA
In this article, we’ll cover precisely what Microsoft Authenticator App is and how you can quickly onboard to digital certificates.
From Static Trust to Dynamic Device Identity
How to Improve Device Identity Context for Network Security
Protect your network from security breach by getting more visibility over your unmanaged and BYOD devices. Device Identity Context can help you improve network security. Continue reading to know more.
Make SSO Phishing-Proof with Certificates
How Digital Certificates Enable Secure Single Sign-On (SSO)
Users in an organization typically need access to many applications to assign and complete their tasks, access email, write code and communicate with each other. Multiple apps require multiple sets...
Eliminate Password Risks in OneLogin with Certificates
Configure Client Certificate Authentication with OneLogin
Configure Client Certificate Authentication on OneLogin and enforce Zero Trust Policy and make your network secure.
Eliminate MFA Fatigue in Ping with Certificate Authentication
Configure Client Certificate Authentication with Ping
As many organizations shift to the digital mode in the post-pandemic era, there is an exponential increase in cloud-based network solutions. Surprisingly, numerous cutting-edge wireless technologies, such as 5G, virtual...
Apple Device Management Simplified: JAMF vs. Kandji
JAMF vs. Kandji: Apple MDMs compared
Read and compare JAMF and Kandji as Apple MDM solutions here.
Portnox vs. Cisco: Choosing the Right NAC for Your Enterprise
Portnox CORE vs. Cisco ISE: NAC Comparison
Read about two popular NAC solutions ad pick out the best one for your organizational needs.
No Passwords. No Headaches. Just Secure Chromebooks.
How to Set Up Passwordless Authentication on Chromebook
Many enterprises are planning to shift towards passwordless authentication for their managed Chromebooks. Passwords have been proven to be a weak form of security, so it’s in everyone’s best interest...
802.1X Authentication Failures? Here’s How to Diagnose
Identifying Network Issues with 802.1X
Open SSIDs don't offer the degree of troubleshooting visibility 802.1X does. Here's how 802.1X helps you troubleshoot network issues.
Strengthen OneLogin Device Trust with Certificates
Enrolling Devices for Certificate Auth for OneLogin Device Trust
Amidst uncertainties in times of war, hackers have frequently upgraded their attack modes and penetrated almost every industry you can think of. The Australian cyber-security head has admitted reporting one...
Critical IAM Tools for Identity-based Network Security
7 Critical IAM Tools
As an organization, you know there are a lot of factors to consider when provisioning network access to employees. You need to ensure that the users are who they claim...
Block Risky Devices in Real Time
Cloud RADIUS for Wi-Fi Authentication
A survey found that 74% of IT decision-makers whose organizations have been breached in the past say it involved privileged access credential abuse. While Wi-Fi revolutionized networking during the transition from...
Protect and control privileged access.
IAM vs. PAM Similarities, Differences and How to Choose
IAM and PAM explained and how the right implementation of the two solution can help make your network security secure from cyberattacks
Standardized TPM Enables Scalable Security
What the Windows 11 TPM Requirement Means for Microsoft
Cyberspace is a rapidly evolving world, and in order to keep up with the pace, tech organizations must evolve at a similar speed. The cyber performance enterprise Riverbed recently analyzed...
Simplify PKI, Cut Google CAS Costs
Google Cloud Certificate Authorities Service Alternative
The digital world has been on a growth spurt for the past few years as more and more devices have come into being. An average user has at least two...
Avoid common pitfalls during the next M&A
Updating Your Network Access Control After a Merger or Acquisition
Updating your network access control after mergers doesn't have to be hard. With the right cybersecurity tools, your NAC can emerge better than ever.
The Rising Role of MFA in Meeting Cyber Insurance Standards
MFA Options for Cyber Insurance Requirements
More cyber insurance providers require MFA. But why, and what other cyber insurance requirements should you prepare for?
WPA2-Enterprise made easy - Fast, Secure, and Error-free User Enrollment
Best Practices for Enrolling Users for WPA2-Enterprise
Wifi is essential in daily life and is critical for any business today. At home, we use a single static password to protect your wifi. This security is called WPA2-Personal....
FreeRADIUS vs. JumpCloud: the pros, the cons, and the smarter alternative
FreeRADIUS vs. Jumpcloud
As technology progresses, hackers have constantly upgraded their modes of attack, which include social engineering techniques to compromise the network space of an organization. Here’s a recent incident of a...
RADIUS Setup Simplified: Easy Wins for Your Network
Configuration Guide: Windows RADIUS Server 2012
Anytime there’s a discussion about a wired or wireless authentication, it’s probable that the word “RADIUS server” will come up sooner or later. RADIUS, also known as a “AAA server,”...
HIPAA Compliance Starts with Secure Wireless Access
HIPAA Compliant Wireless 802.1X
The Health Insurance Portability and Accountability Act (HIPAA) has impacted the way healthcare organizations operate since its introduction in 1996. Its goal, ultimately, was to protect patient data by imposing...
Policy-driven Authentication helps prevent Security Breaches before they happen
Azure AD Conditional Access with 802.1X
The post-pandemic world is witnessing an exponential surge in cloud-based network solutions as many businesses transition into digital mode. Interestingly, many cutting-edge wireless technologies like 5G, virtual reality, and AI...
Leverage user attributes to authenticate devices in cloud directories
Device Authentication with User Attributes for Cloud Directories
When users and devices authenticate to your network, you should ideally have as much information from them as possible to make context-rich security decisions. Certificate-based authentication (CBA) empowers administrators to...
Digital Signatures - Cryptography and PKI combined to secure Communications
Digital Signatures: Explained
An effective Zero Trust architecture is built on a foundation of identity context. Digital signatures support a Zero Trust initiative by cryptographically assuring the identity of the signee, answering questions...
From AD agent failures to MFA issues, troubleshoot Okta errors efficiently
[Solved] Okta Sign-in Error
Okta is one of the leading identity and authentication platforms compatible with both cloud and on-premise directories. They provide a great user experience and support, but you may still run...
Secure Wi-Fi and wired networks in the cloud, effortlessly and reliably
Cloud 802.1x Explained
What Is Cloud 802.1x? An 802.1x network is unique in one major way; it uses a Cloud RADIUS server as a means of authenticating users. The Cloud RADIUS checks a...
Seamless certificate management, zero downtime
What Is Certificate Lifecycle Management (CLM)?
Every digital certificate has a shelf life. When one expires unnoticed, the consequences range from service outages to security breaches. Certificate lifecycle management (CLM) is the practice of tracking, issuing,...
Digital certificates are the backbone of trust in online communications.
The Anatomy Of An X.509 Digital Certificate
Digital certificates are frequently used in the online world as a means of identification. The information embedded in the certificates lets anyone verify the identity of an entity with the...
Keep your software safe and users protected.
Code Signing with Digital Certificates: Explained
Imagine you’re installing an application and a pop-up like the screenshot above comes up. How can you be sure that the application you’re about to download is really safe? The...
Unlock simplified Windows management with the right MDM
Intune vs. Workspace ONE: The Best MDM for Windows Devices
The technological advancements in the last decade have evolved the use of mobile devices such as smartphones and laptops in the corporate world. Before the pandemic, some organizations were skeptical...
Secure access starts with the right RADIUS choice.
Foxpass RADIUS vs. Jumpcloud RaaS
Network authentication has evolved in lockstep with the development of software over the years. The networking protocols considered secure just a few years back have not withstood the test of...
Secure cloud access made simple
This Security Flaw is Preventing Organizations from Switching to Azure AD
The migration from on-premise to cloud-based network infrastructure is becoming more and more common. With better security, scalability, and user experience, the benefits of the cloud cannot be denied. For...
The secrets to seamless Chromebook setup
Top 3 Tips for Enrolling Chromebooks with AD CS
There has been a huge increase in the use of wireless devices to connect to organization’s secure networks and it’s created a new security challenge for network admins. Securely connecting...
Convenience shouldn't come at the cost of security
Cloud-Hosted LDAP is Vulnerable with Credentials
Organizations are always looking for a new strategy to increase the convenience of using their network without compromising security. As a result, many have sought out cloud solutions. Read here...
Stronger, simpler Wi-Fi authentication starts here.
Can I Use Google Secure LDAP for Wi-Fi?
LDAP’s importance cannot be denied. As a protocol, it has greatly simplified the directory search process. Unfortunately, as time goes on, LDAP has begun to grow outdated, especially given its...
Your next login could be password-free.
Can PKI Replace Passwords?
There is a new trend that’s taking the IT world by storm: Passwordless Authentication. NordPass estimates that the average user has between 70 and 80 passwords. That’s why people so...
FIDO2 + PKI = Stronger access, simpler management.
Combining FIDO2 and PKI: Supporting All Your Applications
The world of IT is constantly evolving. This is true due to both advancements in technology and the emerging remote work landscape of the world. Remote work is now commonplace...
Control, Protect, and Manage Encryption Keys Effortlessly
What is a Hardware Security Module?
More than ever, businesses and organizations have a responsibility to secure their data. Highly adaptable organizations have begun to implement a PKI as a means to upgrade network security. According...
Simplifying Network Security for Complex Enterprise Environments.
How To Utilize PKI Certificates
Using a Public Key Infrastructure (PKI) is a great step for any organization choosing to prioritize their network’s security. The primary purpose of a PKI is to manage the public...
Seamless Cloud connectivity with Visibility and Control.
How to Address MAC Randomization for Cloud Networks
Mac Address Randomization is an increasing trend among device manufacturers that are quickly becoming the industry standard. While it can help in reducing the risks of data breaches and spying...
Secure Wi-Fi starts with the right setup.
Is Okta A RADIUS Server?
A RADIUS server operates through connecting to a central database to inform who is allowed to connect to your network. It is a simple and easy-to-configure authentication solution that cannot...
Unmanaged devices are a risk. Device Trust fixes it.
How to Deploy Okta Device Trust on Windows
Device Trust is a concept in cybersecurity with a relatively simple premise; if a device can prove its identity, it can be trusted to have greater access to resources. If...
No revocation tools? Your network security could be at risk.
5 Reasons AD CS Is Not A Complete PKI
Credential-based authentication is the most common form of authentication that everyone is accustomed to. But with most decades-old technologies, credentials are woefully ill-equipped to face modern security threats. While multi-factor...
Ensure safe and reliable connectivity for every student.
Top 4 Network Security Tips for Returning to School
The rapid and unexpected transition to remote learning led many schools to scramble for solutions to a new teaching experience. This led to many schools being forced to stretch their...
Secure your organization’s data in Google Workspace
Google Workspace Network Security Best Practices
Considering the massive amount of revenue loss that can occur with just a single security breach and the continued prevalence of cyber attacks, organizations need to be emphasizing network security...
Unified access and security for mixed-device environments.
Should I Bind Non-Windows Devices to Active Directory?
Digital certificates are starting to take over as the preferred method of network authentication because of their proven superiority to passwords in security and user experience. Many organizations are wanting...
The Right Authentication Protocol for Simplified Identity Management.
Comparing: OAuth, OpenID Connect, and SAML
Properly protecting a network requires administrators to make numerous decisions about their security. Knowing what protocol or system to implement at what stage is paramount to network safety. With Cybercrime...
The Right Authentication Protocol for Stronger Security.
OAuth Vs. OpenID? Which is better?
Authorization and authentication processes need to be more solid and safe than ever. OAuth and OpenID are two well-known names in this field. Before we get into the OAuth vs....
Secure every certificate, simplify every process.
Using Object Identifiers In PKI Management
Management of a PKI can be a full-time task for an IT team. Ensuring network users are able to authenticate to a secure network, easily maintaining their network identity, providing...
Enhance security without slowing down user access.
Configuring MFA with AD FS
It’s widely held knowledge that using a single factor for authentication to wireless networks is less than secure and easily exploitable by hackers. Many organizations recognize this and utilize Multi-Factor...
Smarter access management starts with stronger policies.
Tying IP Addresses to Azure Active Directory Users
Effectively tracking and managing identity context is one of the most important aspects of a secure Azure-based network. Without accurate identity context, it’s near impossible to determine if someone is...
One key, total access, zero hassle
Everything You Need to Know About FIDO2
Security Keys are a method of authentication that is becoming increasingly more commonplace due to the additional layer of security they provide. They are a versatile security component that can...
Seamless transition from Active Directory to the cloud.
I Have Active Directory, How do I Move to the Cloud?
It’s no secret that organizations are making the transition to cloud-based network environments. This is especially true considering the dramatic increase in remote work due to the global pandemic. Network...
Customize your device’s trust store for tailored security.
What is the Android Trusted Credentials Store?
Similar to Windows and macOS, Android devices need a system in place in order to determine if a certificate issued by a particular Certificate Authority (CA) is trusted. How does...
Reduce attack surface without impacting usability.
MacOS Smart Card Services
Smart Card usage has been on the rise for a variety of different reasons, but undoubtedly the most prominent is for their identity management capabilities. Cybersecurity-oriented organizations are taking advantage...
Every user, every device, always verified.
Zero Trust Strategy Best Practices With AD CS
Zero trust is a burgeoning security practice among cybersecurity-focused organizations. The main concept behind zero trust is limiting a user’s resources to only what they need access to. For example,...
Private keys verified, trust simplified.
Private Key Attestation on macOS
Key attestation is a necessary part of creating valid X.509 digital certificates. Asymmetric cryptography requires that the client be able to prove its identity by attesting to the secure creation...
Bridge legacy RADIUS with modern cloud MFA.
The NPS Extension for Cloud Authentication
Authentication security is an incredibly diverse field with countless options for organizations to choose from. How to authenticate your users to a secure network is a difficult decision to make...
Smart Wi-Fi security for modern classrooms.
Setting up Secure BYOD Wi-Fi for K-12 Students
The days of getting in trouble for bringing technology into class are long gone. Many school districts actually rely on students to bring their own devices in order to incorporate...
PIV-ready YubiKeys deployed efficiently without manual effort.
YubiKey Automatic Programming Software (Works with PIV)
YubiKeys are an easy way to significantly improve authentication security and, with digital certificates, can even provide a high degree of identity assurance. However, the native Yubikey configuration and personalization...
Avoid unexpected expenses from self-hosted CAs.
3 Hidden Costs of an On-Prem CA
A certificate authority is a requirement for many organizations, whether for customer-facing products or internal security protocols. One of the first decisions to make regarding a Public Key Infrastructure (PKI),...
Modern Wi-Fi, simplified for every network.
How To Use Google Wi-Fi Without Active Directory and NPS?
While technology changes rapidly, one constant is the use of Google and its spread across all facets of business technology. But how people connect to Google services and how they...
Streamline security with automated certificates.
Simplify Certificate Enrollment with AD CS
Many organizations recognize the inherent cybersecurity weakness of credential-based authentication and have made the switch to certificates as a result. The decision to move away from reliance on credentials is...
Leverage AD CS for secure VPN connections.
Securing VPN Authentication with AD CS
The rise in remote working has been increasing since the dawn of the digital age, but the increase has seen an especially massive jump since the outbreak of the COVID-19...
Dynamic role-based access with SSID-based policies.
Assigning Network Access Policies Based On SSID
Using network access policies to segment users into VLANs with appropriate permissions is a core part of every organization’s identity and access management (IAM) strategy. More options to customize access...
Secure VPN access with 802.1X authentication.
How to Secure 802.1X for Remote Workers
Though remote work wasn’t started by the Covid-19 pandemic, it has increased drastically to the point that working from home will be commonplace for many workers. Unfortunately that leaves organizations...
Seamless VPN. Constant Defense.
What is Always On VPN?
The rise in remote working has steadily increased with new innovations in technology, but has seen a massive increase since the Covid-19 pandemic. Companies the world over have sent their...
One Step Could Save Your Network From Chaos.
How To Properly Delete a Certificate Authority
Securing communications via digital certificates is among the most secure processes used by organizations today. The use of public key cryptography makes certificates uncrackable and can be used to protect...
Secure, Open-Source PKI with Endless Possibilities.
What is OpenXPKI?
Deploying digital certificates for internal and external use is a growing trend throughout countless industries. Of course, as more people convert to using certificates, they find that using the proper...
Secure Your Certificates, Simplify Your PKI.
The Best Private CA / PKI Service
The use of certificates for network security is rapidly increasing due to their superiority over all other authentication methods. They’re incredibly versatile and can enable authentication customization that far surpasses...
The Key to Smoother Network Security.
What is a AWS Private CA?
Private certificate authorities (CA), also known as enterprise CAs, are CAs specifically meant for internal use. They are self-hosted and therefore not trusted externally. The usual use cases come from...
Enhance Security by Automating Certificate Enrollment for Managed Devices.
Issuing Certificates to Corporate-Owned Devices with Okta
Large organizations face a common problem when it comes to authentication: managing a variety of credentials for an assortment of different web applications. Each different application requires a unique set...
The Hidden Risk of Expired Certificates.
What is Certificate Revocation?
The average enterprise manages thousands of certificates in 2026. The expanding attack surfaces increase the risk of security breaches and expose organizations to an estimated financial loss of $3.07 million annually. Having...
Ensure smooth PKI operations on your Microsoft devices
How to Setup Microsoft Enterprise PKI
The definition for a Public Key Infrastructures (PKI) varies among cyber security professionals, but is generally considered a collection of components that give everything an organization needs to issue and...
Simplifying Enterprise Security with Microsoft CA Certificates.
How to Issue a Certificate from a Microsoft CA Server
Now that we’ve learned passwords are not a secure form of authentication, organizations are implementing digital certificates, which provide stronger security and can be leveraged for more efficient network authentication....
The Essential Identity Layer Behind Zero Trust Security.
A PKI is the Foundation for Zero Trust Network Security
The IT industry is evolving rapidly, with new technologies, devices, and systems introduced regularly. Organizations are regularly having to update and upgrade their environments regularly to keep up with the...
A Better Way to Manage Identity at Scale.
Running PKI-as-a-Service
Creating and operating a certificate-based network is no simple task. Without a highly knowledgeable staff that is well-versed in certificate management, an organization can get bogged down in integration, configuration,...
Lessons from the SolarWinds compromise
SolarWinds Compromise
Earlier this month, SolarWinds was breached by (who experts theorize to be) the hacker Russian organization, Cozy Bear. This attack has left 18,000 organizations potentially compromised with 250 of which...
Why OAuth alone can’t secure user identities.
Top 3 Pitfalls of Authenticating with OAuth
What is OAuth? Let’s demystify OAuth by starting with a definition. At its core, OAuth provides clients secure access to a server’s resources on behalf of a resource owner. OAuth...
Smarter approach for stronger CA operations.
Maximizing an Internal Windows Certificate Authority
Maintaining a secure network that is easily accessible for users within an organization is more difficult than ever. As cybersecurity technologies improve to address current threats, malicious attackers continue to...
Take control of your network’s trust without the guesswork.
Managing an Internal CA
When considering the failures of credential-based authentication, it’s no surprise that many security-conscious organizations have been upgrading to certificates for authentication. One of the benefits of certificates is the flexibility...
Control, security, and speed in one solution.
Managed Certificate Authority Services
What is a Certificate Authority? A certificate authority (CA) is an entity that distributes digital certificates. These certificates cryptographically tie an identity to a public key, ensuring that individuals online...
Enforce dynamic policies on your network effortlessly.
How to Configure Azure AD Attributes on Certificates
Attribute mapping in Azure AD (Microsoft Entra ID) is easier than you might think. With a simple SAML application, you can use customizable Azure attributes to enforce dynamic policy options...
Redefine access. Protect your network.
Using Okta to Implement Zero Trust Network Access
Zero Trust is a cybersecurity concept that is being implemented by many security-conscious organizations to combat the external and internal threats they face. At its core, the purpose of Zero...
Smart policies, seamless management, zero guesswork.
Can I Use Group Policy Objects with Azure?
As technology continues to migrate to cloud-based networking, many organizations have sought to take advantage of efficient cloud solutions. As a result, Microsoft-based organizations have been transitioning to Azure for...
Secure your network from the inside out.
What is a Microsoft Certificate Authority?
What is a Certificate Authority? A certificate authority (CA) is an entity that distributes digital certificates to devices. They assist in validating the identities of websites, individuals, and devices before...
Build trust internally and secure every connection effortlessly.
How to Run Your Own Certificate Authority
What is a Certificate Authority? A certificate authority (CA) is an entity that distributes digital certificates to devices. A digital certificate certifies the ownership of a public key by tying...
Eliminate password vulnerabilities by configuring RADIUS with Google Workspace.
How to Configure RADIUS with G-Suite (Google Workspace)
Google Suite, also known as Google Workspace is many people’s go to cloud-based productivity suite. While Google Suite is known for its ease of use, it’s credential-based authentication creates another...
Passwordless Wi-Fi made simple with FreeRADIUS.
G Suite + FreeRADIUS for WiFi Authentication
IT experts are stressing network security now more than ever, especially considering the massive amount of revenue loss that can occur with a security breach and how 10 million attacks...
Elevate MSP security with seamless integrations.
Best Network Security Solutions for MSPs
Among small businesses that have been targeted by cyber-criminals, 70% were used as an entry point into a larger enterprise system they supply to. Nearly half (48%) of the cases...
Secure every connection with policy-driven 802.1X access.
How To Use Azure AD Conditional Access for a Zero Trust 802.1x Network
The standard method of thinking about network security is long overdue for an update. The usual “perimeter protection” approach consists of defining, and then controlling, a virtual boundary to make...
Streamline certificate issuance using AD CS automation.
How to Auto-Enroll Certificates from AD CS
Active Directory Certificate Services (AD CS) is a Windows server software solution designed to issue x.509 digital certificates. Certificates have proven to be more secure and easier to use than...
Enhanced Wi-Fi security with FreeRADIUS EAP-TLS.
Configuring FreeRADIUS for EAP-TLS Authentication
FreeRADIUS is one of the most widely used RADIUS authentication providers, with customers ranging from top enterprises to universities. While FreeRADIUS is certainly an effective authentication tool, cybersecurity hinges on...
AD CS and the cloud: A mismatch?
Does AD CS Work in the Cloud?
Digital certificates have taken over as the preferred method of network authentication because of their proven superiority to passwords in security and user experience. Many organizations recognize this and want...
GPO-driven PKI makes certificate management effortless.
PKI for Microsoft GPO
Microsoft’s Group Policy Object (GPO) is a useful tool to allow administrators to control the level of access for users on the network. In addition to providing strong security from...
Active Directory, reinvented for the cloud.
How To Use Active Directory in the Cloud
Organizations are making the much-needed transition to cloud-based network solutions. To ease the transition, Microsoft created Azure Active Directory to aid clients in moving their directories from the on-premise Active...
One PKI. Multiple clients. Infinite trust.
Multi-Tenant Cloud PKI for MSPs
A PKI is a vital part of any comprehensive network security strategy and Managed Service Providers (MSPs) are aware of this. Currently, MSPs are under scrutiny as a number of...
The right way to do AD, without the guesswork.
Top 3 Tips on Configuring Policies in Active Directory Certificate Services
Active Directory Certificate Services (AD CS) is a Windows server software solution designed to issue x.509 digital certificates. Certificates have proven to be more secure and easier to use than...
Beyond Azure's built-in encryption: what's missing?
TLS/SSL Encryption with Azure
Improving cyber security is crucial for organizations as one cyber attack could trigger the downfall and bankruptcy of an entire business. That’s why end-to-end encryption has become a network security...
Guest access, zero compromise.
Authenticating Guest Users for VPN With Microsoft Entra B2B (Azure AD) and SecureW2
Cross-organization collaboration can be tricky for the IT department. The team needs to ensure a partner organization’s security policies match their own, then create temporary guest user accounts and then...
Azure AD B2B meets 802.1X security.
Enable 802.1X For Guest Users with Azure AD B2B and SecureW2
Business-to-Business collaboration is essential for company growth. Thousands of companies have collaborated on projects to increase company value and spread risk. At the core of these collaborations is identity and...
Secure, scalable PKI for Active Directory environments
Managed PKI Solutions for Active Directory Certificate Services
Investing in a Public Key Infrastructure (PKI) for your 802.1x network is the single best decision you can make to improve your network. The hardened security and improved user experience...
Dynamic segmentation for smarter VPN access.
Dynamic RADIUS VLAN Assignment for VPN
One quarter of all internet users in the world used a VPN in the last month to protect their identity privacy and their data privacy while accessing the internet. Are...
Unlock LDAP’s power with Google’s cloud.
Can I Use Google With LDAP?
Google Suite, also known as Google Workspace, is many people’s go to cloud-based productivity suite. G-Suite is a collection of collaboration tools and software that organizations can use to increase...
Ditch the directory. Embrace the cloud.
Can I Replace LDAP/OpenLDAP with Azure?
OpenLDAP is a free, open-source LDAP server that is used and trusted by organizations around the world. Historically, OpenLDAP has been a good solution for directory services and has succeeded...
Proactive measures for a stronger security posture.
Best Cyber Security Practices for MSPs
Over 30 millions businesses have fewer than 1,000 employees and many don’t have the IT budget to provide effective network security. Managed Service Providers (MSP) are a godsend for small...
TLS: modern encryption for modern networks.
SSL vs. TLS Certificates
One of the most important security precautions for any customer-facing organization is to ensure data sent between the two parties is protected from outside attacks. Without data integrity, customers or...
From legacy systems to future-ready solutions.
Problems Facing IT Departments
No one can deny that the IT department is tasked with monumentally important functions. Without an efficient and secure network, nearly every organization would fall apart. IT has to find...
Network access that adapts to your role.
What is VLAN Steering?
The VLAN (Virtual Local Area Network) is an important tool in the IT toolbox. By emulating the properties of a Local Area Network, you can segment users into any number...
RADIUS + MFA = VPN security upgrade.
Securing VPN Authentication with RADIUS & MFA
Due to the Covid-19 pandemic, organizations all over the world have closed their offices and sent their employees home to work remotely. The mass exodus from the office to remote...
Cyber threats evolve; MSPs must adapt.
Top 3 Cybersecurity Concerns for MSPs
Managed service providers (MSPs) have been the focal point of a series of attacks that are starting to draw attention from the public. A study conducted by Vanson Bourne surveyed...
Tamper-Proof Security at the Chip Level
What is a TPM?
A TPM, also known as a Trusted Platform Module, is an international standard for a secure cryptoprocessor and is a chip found on the computer’s motherboard. The function of a...
Cloud PKI: Stronger, Smarter, More Secure
How to Choose a Managed Cloud PKI
As cloud technology and reliability continue to surpass their on-premise counterparts, more than 50% of organizations have made the switch to managed cloud PKI or plan to soon. If your...
Hierarchies & Trusts: Organize, Control, Connect
Active Directory: Explained
Directory servers make it easy for admins to store and access resources including user and device information, computers, files, server, and much more. Back in the old days, in order...
Privacy Meets Seamless Roaming
A Passpoint Solution for MAC Randomization
Although MAC Randomization has been around for a few years, it has really grown in popularity with the beta version of Apple iOS 14 update because it’s a default enabled...
Passwordless Okta with YubiKeys at Scale
Okta Smartcard Authentication Expanded
Okta is a popular choice for organizations that want top-of-the-line cloud identity management. It’s one of the largest identity providers with a modern cloud directory and a plethora of handy...
Choose by Use-Case: Local Control or Cloud Convenience
LDAP vs SAML, Access Protocol Comparison
LDAP and SAML are major authentication protocols that securely authenticate users to a network. They determine how users interact with a resource by connecting them to the respective directory services,...
AD DS: Your On-Prem Directory Hub
AD DS: Explained
The purpose of online directories is to store resources on the network in a way that it’s simple to access. Microsoft’s Active Directory (AD) has risen through the ranks to...
NPS: Legacy, Not Cloud-Ready
Can I Use NPS with Cloud Directories?
The RADIUS protocol is used by thousands of organizations to protect their networks. Network admins set up RADIUS servers to verify approved network users, drastically reducing the risk of a...
Automate YubiKey PIN/PUK via Cloud SCMS
YubiKey PIN/PUK Configuration at Scale
Yubikeys are an all-in-one MFA device. In addition to serving as a physical authentication token, they can generate one-time-passwords (OTP) and require users to input a PIN. It’s quite difficult...
Secure Your Network in Hours, Not Weeks
Strong Network Security with Azure
Azure AD is a highly effective IDP that was built as a successor to Active Directory (AD) to accommodate newer, cloud-centric organizations. AD does not work natively in the cloud,...
Passwordless Azure: Tap, Don’t Type
Enhanced Azure Authentication with Yubikey
The cross section of organizations that use Azure AD (Microsoft Entra ID) for identity management and Yubikeys for MFA is already sizable and growing by the day. Recent advancements in...
Real-Time Policies, Certificate-Powered Access
Secure Authentication for Azure Networks
Wireless security is crucial now that most sensitive data can be accessed online. It’s imperative for network administrators to dictate who can access the network and how much they’re allowed...
Azure AD B2C: Consumer-Focused, Not Wi-Fi Ready
Use Azure AD B2C for 802.1x Authentication
Microsoft employs a myriad of acronyms for their product names, so it’s often difficult to tell them apart or to guess their function. “Azure AD (Microsoft Entra ID) B2C” is...
No Single Point of Failure: RADIUS Redundancy Works
What Is RADIUS Redundancy?
In all manner of security, redundancy is strength. It’s a way to ensure that no matter what goes wrong, there is a backup plan in action that can certify safety....
Scale Okta VPN Auth with SecureW2 Automation
Multi-Factor Authentication for Okta VPN
When it comes to authentication security, one of the simplest upgrades you can make that will drastically improve your network’s safety is to implement Multi-Factor Authentication (MFA). Simply put, MFA...
Token-Based VPN Auth & Auto Configuration
How to Use VPN With Azure AD
As cloud-based solutions are gaining popularity, many organizations are having trouble transitioning to their on-prem servers. To help alleviate some stress, Microsoft created Azure AD (Microsoft Entra ID) to aid...
Swap Passwords for Hardware-Backed Certs
Okta SSO With Certificate Authentication
A major issue that organizations face for authentication is managing different credentials for various web applications. Traditionally, web app authentication requires a unique and complex set of credentials to ensure...
Delegate, Don’t Duplicate Your Credentials.
Okta Vs. LDAP
For many years, LDAP has been the dominant protocol for secure user authentication for on-premise directories. Organizations have used LDAP to store and retrieve data from directory services and it...
Real-Time Identity, Real-Time Control
User Lookup With Certificate-Based Authentication
Traditionally, the process of authenticating certificates for network access is independent of the user directory. And in a normally-functioning network environment, this is perfectly acceptable. Certificate-based authentication is ironclad and...
Directory Checks + CRL = Double-Confirmed Trust
Dynamic RADIUS Policy Enforcement with Static Certificates
Certificate-based WPA2-Enterprise networks are extremely secure, but x.509 digital certificates can be a hassle to manage. Although SecureW2 has one of the best certificate management platforms in the industry, we’re...
Passwordless Wi-Fi & VPN with Azure AD Certificates
A Cloud PKI Solution for Azure AD
Azure AD (Microsoft Entra ID) customers can ditch password-based authentication and switch to x.509 certificate-based authentication. Digital certificates offer vast improvements to network security, efficiency, and user experience. But in...
Know the Difference. Secure Your Network.
Active Directory Vs. LDAP
Active Directory (AD) and Lightweight Directory Access Protocol (LDAP) are two terms frequently used regarding directory services. These solutions are essential frameworks for managing user identities, resources, and network configurations...
Setup Wi-Fi Auth in Clicks, Not Hours
How to Use Google for 802.1x Wi-Fi
Organizations are making the much-needed transition to cloud-based network solutions and Google is a forerunner in getting people’s devices and networks in the cloud. However, for some, getting your devices...
Redundant, Resilient, Multi-Tenant RADIUS
What is Dynamic RADIUS?
SecureW2 is pleased to announce the invention of a whole new kind of AAA server – Dynamic (Cloud) RADIUS. It will revolutionize the way you authenticate users and enforce policies...
Multi-Tenant, Policy-Driven, MSP-Ready RADIUS
Shared Hosted RADIUS for Managed Service Providers
It’s widely accepted that using a RADIUS server for network authentication is the most secure method, but there’s a significant number of organizations for which RADIUS isn’t feasible. SecureW2 has...
X.509 on Okta, Passwordless Made Easy
Generate x.509 Certificates with Okta
A major challenge that organizations face in regards to certificates is enrolling users without Active Directory. In response, SecureW2 has developed a solution that can provide a certificate-based network regardless...
The Average Internet User Manages 70+ Passwords?! No, Thank You.
Are Passwords Secure?
Credential-based authentication is the method nearly all network users are used to and has been a common tool for decades. But unlike other decades-old technology, passwords have not been phased...
Shared Passwords, Shared Risk
The Importance of Authentication Security
Authentication acts as the first line of defense to allow access to valuable data only to those who are approved by the organization. Many organizations recognize this and utilize Multi-Factor...
802.11u: Pre-Connect Intelligence Beats Spoofing
Mobile Authentication with 802.11u
As mobile device users continue to expect stronger roaming connections and faster data speeds, Wi-Fi Alliance developed PassPoint to meet these high standards. It allows users to easily transfer from...
Device-Only? No Problem - Certify the Machine
Enabling Windows Machine Certificate Authentication
Looking to use certificate-based authentication on your managed windows devices? Machine authentication with x.509 certificates permits managed Windows machines that don’t belong to any users, to authenticate onto a 802.1X...
Click, Validate, Secure: Onboard Any Device
PKI Delivery Software for Every Device
While the advantages of certificate-based authentication over credential-based are well documented, many still experience the barrier to entry of provisioning devices with certificates. This is certainly a valid concern for...
Manage YubiKeys at Scale with Integrated SCMS
YubiKey PIV Certificate Management
Many organizations purchase security keys like the YubiKey to streamline and secure access to various applications, but they can be used for much more. The YubiKey in particular has the...
AD CS + SecureW2 = Fast, Scalable Wi-Fi Security
Enabling 802.1x with AD CS
Keeping your network secure from unwanted intruders is increasingly difficult with the advancements in technology. It’s relatively easy for malicious actors to obtain network access and steal all the data...
Okta + RADIUS = Stronger, Scalable Network Access
How to Set Up RADIUS Authentication with Okta
As the internet continues its trend toward ubiquity, the dangers of lackluster network security have become increasingly apparent. With 10 million attacks targeting usernames and passwords occur every day it’s...
Upload Your GeoTrust CA and Simplify Certificate Issuance
How to Issue GeoTrust Certificates
How to Issue GeoTrust Certificates to Devices GeoTrust is one of the world’s largest digital certificate providers with more than 100,000 customers in over 150 countries. GeoTrust offers a variety...
802.1X: No AD Required
802.1x Without Active Directory
802.1X is the de facto gold standard that organizations should strive for when it comes to authentication; it’s safe, secure, and efficient, especially when combined with certificates. However, setting up...
AD CS + SecureW2 = Secure Wi-Fi, Made Easy
Enable Secure Wi-Fi with AD CS
In an age where people have migrated to conducting business online, organizations must ensure their Wi-Fi networks are protected from outside threats. Cyber attacks, including the infamous man-in-the-middle attack, prey...
Even Big Brands Slip Up. Don’t Be Next
The Risk of Expiring Web Certificates
Certificate use in a variety of mediums continues to grow, but your certificate provider cannot protect against a common certificate mistake: missing expiration dates. This isn’t a major issue if...
Secure BYOD, ChromeBooks & IoT with Sectigo Certs
How to Issue Sectigo Certificates
Sectigo, formerly known as Comodo, is a leading provider of digital identity solutions. One of their main products are SSL/TLS certificates and Public Key Infrastructures (PKI), which allows the client...
IoT and BYOD Secured with DigiCert Certs
How to Issue Digicert Certificates to Devices
Digicert offers a variety of SSL certificates to accommodate any organizational structure and fulfill their specific needs. They supply you with the tools to configure any Platform/OS combination, giving the...
Protect your VPN from phishing with certificate-based authentication.
How to Prevent VPN Phishing Attacks
What is a Phishing Attack A phishing attack is a type of social engineering attack that is used to steal an unsuspecting user’s data by masquerading as a trusted platform....
Certificates from SecureW2, Defense in Depth
Enabling Double Encryption for Zscaler with SecureW2’s PKI
Double encryption adds an extra layer of security to ensure that the connections between the Z App, Connectors, and ZPA ZENs stay protected. Although Zscaler already comes with a layer...
Skip PINs, Deploy Certificates
PKI-Supported CMS for Yubikey
A CMS (Credential Management System) or SCMS (Smart Card Management System) is an invaluable tool for organizations using smart cards and security keys. They have many functions to control credentials...
Cloud PKI: Scalable Security Without the Server Hassle
Configuring a PKI for Wi-Fi
Wi-Fi security and availability is imperative for businesses now that online communication is the standard. Many organizations use passwords to authenticate user devices, but that is no longer a viable...
Provision Devices in Minutes, Not Hours
How to Automate Certificate Management and Provisioning
One of the biggest hurdles in certificate management is the lack of experience in finding the proper certificate management solutions. Often, administrators are of the notion that their only option...
Automated Passpoint Onboarding at Scale
Can I Use Passpoint with Microsoft Azure?
The best way to ensure roaming internet access for employees is by deploying Passpoint. Whether you just need to be covered across campus or want to extend your network to...
Dynamic PKI, Cloud RADIUS, JoinNow: All-in-One
The Best Way to Manage Microsoft Certificates
A primary weakness of password-based authentication is the human element. Passwords can be forgotten, shared, or stolen, making them a nightmare for IT admins. Forgotten passwords can lead to service...
Zero-Touch Enrollment for Passpoint with G-Suite
Can I Use Passpoint with Google Workspace
Passpoint is the premier tool for ensuring your users have network access while roaming, but it can be a little difficult to deploy. Fortunately, SecureW2 has a solution that integrates...
Secure Wi-Fi with Okta + Cloud RADIUS
Can I Use The Okta RADIUS Agent For My Wi-Fi?
An Okta RADIUS server agent is a lightweight program that runs as a service outside of Okta. It is usually installed outside of a firewall which gives Okta a route...
Clone AD CS Templates—Don’t Use Defaults
Top 3 Mistakes Setting Up AD CS Certificate Templates
In order to use certificates for authentication, a security trend caused by the inadequacies of password-based authentication, a public key infrastructure (PKI) must be in place. Active Directory Certificates Services...
Secure Certificate Management—Simple, Scalable, Internal
Creating Private Certificates Authorities for Internal Use
What is a Certificate Authority? A certificate authority (CA) is an entity that distributes digital certificates to devices. These certificates cryptographically tie an identity to a public key, ensuring that...
Discover which operating systems support Passpoint Wi-Fi
List of Passpoint-Supported Operating Systems
Passpoint is a great tool to enable your network users to have continued access to the internet – whether they’re roaming around the city or moving from building to building...
R1 Works Now—R2 Is Still Rare
Passpoint r1 & r2 Compared
Enabling an online connection while users are away from their home networks has been a challenge for those that want a complete and efficient system. The use of mobile data...
Policy-Driven Attestation: Secure Access Automatically
Yubikey Certificate Attestation Improved
Cyber security is ever-evolving to counter the attacks that are getting more aggressive by the day. One-step authentication is no longer enough to establish identity with absolute certainty. 2FA (two-factor...
Learn what enterprise PKI is, why it’s so important, how it functions behind the scenes, and what organ...
Enterprise PKI Management in the Cloud
Authentication using certificates instead of credentials improves network security and greatly reduces risks such as credential theft or unauthorized access. But using certificates requires either a managed public key infrastructure...
Policies That Adapt—No Certificate Reissues Needed
3 Security Advantages of a Cloud RADIUS Server
In order to successfully configure a WPA2-Enterprise network you must have a RADIUS server. The RADIUS authorizes and authenticates users signing into the network and eliminates any speculation into who...
ECC: Maximum Security, Minimal Resources
Why ECC is the Solution for IoT Security
ECC, or Eliptical Curve Cryptography, isn’t a new technology – it’s relatively old, actually, Despite being around since 1985, it has just recently begun to gain popularity as an alternative,...
End-to-End VPN Encryption: Non-Negotiable
Using VPN for Remote Work? Don’t Make this VPN Security Mistake
We have never been more connected with others than we are today. The workforce is quickly moving to mobile devices. Remote work has picked up dramatically due to the COVID-19...
Automation > Human Error in BYOD Onboarding
3 Best Practices for Onboarding BYODs
Bring Your Own Device (BYOD) systems can be an amazing tool for businesses or schools looking to increase productivity and reduce cost. According to a study by Forbes, 42 percent...
Ditch LDAP, Embrace EAP-TLS and the Cloud
Why Most Are Leaving LDAP With WPA2-Enterprise Behind
For years, the credential-based network authentication standard was the Lightweight Directory Access Protocol (LDAP). The security and efficiency offered by LDAP provided the necessary protection levels for everyday WPA2-Enterprise operations....
Get Flexibility + Security—Choose Managed PKI
Managed PKI VS Private PKI
Deciding between a managed PKI and a private PKI is a difficult decision. Each method of PKI management has advantages and disadvantages, and if you’re coming from a place of...
Certificates for Wi-Fi, Replacing Passwords Now
Top 4 Managed PKI Use Cases
A Managed PKI is a vital part of any comprehensive network security strategy. It allows you to use digital certificates for authentication, a form of credential that’s much more secure...
SHA-1 Is Broken—It’s Time to Upgrade
It’s Time For SHA-1 Hash To End
SHA-1 is a commonly used cryptographic hash algorithm that has been used for nearly 2 decades to secure online communications. It was originally designed for government use, but an exploit...
Credentials Alone Are Easy Prey
Phishing Scams Are Now Capitalizing on Coronavirus
COVID-19, better known as the Coronavirus, is spreading throughout the world right now and has a lot of people concerned. This has led to scammers incorporating the virus into their...
Passwords are the Weak Link in Ransomware Defense
How To Address America’s Ransomware Threats
Over the course of the 2010s, ransomware attacks on city and state governments have increased in number and effectiveness. The lack of proper cybersecurity measures has highlighted a weakness in...
Healthy Teams ➝ Stronger Defenses
Combating Burnout in Cybersecurity
Cybersecurity professionals are highly sought-after individuals that add an immense amount of value to an organization, but that value can be difficult to pin down in terms of dollars. As...
Stop Settling: PEAP-MSCHAPv2 Falls Short
Top 3 PEAP-MSCHAPv2 Mistakes Made by Universities
Credential-based authentication with PEAP-MSCHAPv2 is still commonly used, and for some network types it is appropriate. A home network or a small coffee shop offering free wireless can benefit from...
Know Every Device, Patch Every Risk
Best Practices For IoT Security
The explosion of Internet of Things devices (IoT) onto the technology market has revolutionized how businesses operate. The endless possible applications of these incredibly diverse devices has led to a...
Don’t Wait for Credential Theft to Hit
3 Mistakes Universities Make Deploying 802.1x and WPA2-Enterprise
Over the past decade, we’ve helped hundreds of organizations around the world secure and set up WPA2-Enterprise networks. While WPA2-Enterprise remains the golden standard for 802.1x authentication, there are many...
Certs, Not Passwords—Secure Your IoT Edge
Certificate Security for IoT Devices
Internet of Things (IoT) devices have been a rapidly growing industry trend that can provide invaluable and unique data to many organizations. While most devices are designed to maximize the...
Modern Networks Choose Cloud First
Cloud vs. On-Prem RADIUS: Which is Better?
A requirement for all WPA2-Enterprise networks is the use of a RADIUS server. A vital part of the network, the function of a RADIUS is to authenticate the user and...
Old TLS, Big Risks: Upgrade Now
Update Your Browser to TLS 1.2 to Support 802.1x WPA2-Enterprise
Organizations should be aware of an important update to TLS. TLS 1.2 is the most recent update that builds on top of TLS 1.0 and TLS 1.1 to increase network...
Control, Validation, Security - Why Internal CAs Win
Reduce the Risks of a Certificate Authority
Recently, cybercriminals have begun targeting public Certificate Authorities (CA) to obtain legitimate certificates and then sell them on the black market. Because these are verified and signed certificates obtained by...
YubiKey + Certs = Real-World Versatility
Using Digital Certificates on Yubikey
Yubikeys are an incredibly secure method of protecting yourself from data theft, but you’re probably not using them to their full potential. Natively, Yubikeys only support credential-based authentication through keypairs...
Certificate Automation Across All Devices
Best Practices for AD CS Configuration
Many companies use Windows servers as the main component of their IT infrastructures. If those companies want to use digital certificates for their network, they set up a public key...
Automate, Validate, Secure: Certificate-Based MFA
Stronger Multi-Factor Authentication With Certificates
It’s widely held knowledge that using a single factor for authentication to wireless networks is less than secure and easily exploited by hackers. According to IBM’s X-Force Threat Intelligence Index,...
SecureW2 Simplifies PIV Certificate Onboarding
Certificate-Based Authentication for Okta PIV Cards
Efficiency is the name of the game when operating a wireless network. Designing every facet of the network with the user experience in mind will result in a streamlined system...
Public key cryptography powers secure communication.
What is Public Key Cryptography?
Public key cryptography, a synonym for asymmetric cryptography, is a clever cryptographic system that allows two parties to exchange encrypted information publicly without worry of interception. Many cryptographic systems are...
Secure Jamf-managed Macs with YubiKey logins.
Configuring Yubikey Desktop Login on Jamf-Managed Devices
Yubikeys represent an exciting opportunity to merge two features that are often at odds: security and convenience. Many organizations have purchased Yubikeys and distributed them to their employees for that...
Security keys deliver passwordless, phishing-resistant authentication—made stronger with certificate pr...
Unlock the Potential of Security Keys
Security keys, also called hardware security keys, are a method of authentication that offers an additional layer of hardened security. They can be used to login to desktops, Wi-Fi, and...
Make BYOD safe and simple—ditch manual setup and embrace certificate-based, self-service onboarding.
How To Avoid BYOD Onboarding Issues
In today’s mobile era, consumers are no longer chained to a bulky desktop in a cubicle or classroom. They are doing business, taking classes, and accessing resources on the go...
Onboard thousands of devices securely. WPA2-Enterprise with automated onboarding and certificates streaml...
Use WPA-2 Enterprise To Efficiently Onboard Thousands of Devices
Each year, college campuses must navigate the trials associated with successfully onboarding thousands of new students to the wireless network. This may have been moderately challenging 10 years ago, but...
iOS 9 devices get locked out after password updates. Switch to EAP-TLS or reconfigure via onboarding tool...
iOS 9.x Wi-Fi Connectivity Issue with EAP-TTLS and EAP-PEAP: Explained
The iOS 9+ bug: Why do PEAP or TTLS users get locked out of Wi-Fi when their password is updated? Why and how does TLS authentication still work? Should you...
Reduce support burden: streamline device setup with automated onboarding and remote troubleshooting.
Buried Under a Mountain of Support Tickets? We Can Help!
Support tickets are an inescapable burden that many IT departments wish they could reduce. Resolving technical issues is a vital function of any IT department, but they amount to a...
Avoid misconfiguration, boost efficiency, and stay secure by automating WPA2-Enterprise onboarding with c...
Top 3 Mistakes When Setting Up a WPA2-Enterprise Network
The importance of wireless security cannot be understated as the threat of data theft continues to rise. WPA2-Enterprise networks are the first line of defense – they’ve been proven time...
Simplify access and boost security with SAML SSO—you sign in once and unlock Wi-Fi and apps securely.
Streamline Your Network with a Single Sign-On Policy
Organizations that seek out opportunities to improve the efficiency of their network should consider using SAML authentication to implement a Single Sign-On (SSO) policy. First and foremost, SAML is an...
Secure systems aren’t enough. Constant configuration checks, logging, and proactive testing keep your d...
Effective Cybersecurity in Banking Starts With People
Large banking institutions like Capital One are among the most targeted organizations by cyber-criminals looking to profit through data theft. Banks are responsible for protecting heaps of personal information about...
WPA3 brings stronger Wi-Fi protection - new authentication, safer management frames, and enforced validat...
What’s In Store With WPA3-Enterprise?
The network type WPA has been upgraded once since its inception in 1999. In 2004, it was replaced by WPA2, which has stood as the standard for highly secure wireless...
Protect your network from credential theft by combining certificate-based controls, PAM, and machine lear...
Addressing Credential Theft Threats From Every Angle
The looming threat of a data breach has influenced many organizations to step up the security protecting their wireless network. Organizations with personnel files, financial information, and other types of...
Even trusted security tools can fail. Constant testing and vigilance are the only way to stay secure.
How Vulnerabilities Put Sensitive Data at Risk
Cybersecurity is one of the most dynamic and complex industries in the world today. A business that provides cybersecurity software or products is not just competing against other companies; they’re...
Higher Ed can cut Wi-Fi headaches by moving from passwords to effortless, certificate-based device onboar...
Efficient Device Onboarding for Higher Education
An important first task for incoming students is to connect to the secure network they will use for all their on-campus studies. If the process is less than smooth, the...
The Equifax breach proved that expired certificates and weak security practices can expose millions to ri...
Equifax’s Story: The Risks of Lax Security
On July 29th, 2017, Equifax discovered that data was leaking out of the credit bureau’s databases and had been since approximately mid-May of that year. They publicly reported the incident...
SSL inspection strengthens security by decrypting traffic, blocking threats, and requires certificates th...
Implementing SSL Inspection
The proliferation of HTTPS websites has been a benefit and a challenge for network administrators. Overall, HTTPS enhances the overall security of websites because it encrypts the communications between the...
SCEP Gateways Automate Certificate Distribution for Managed Devices.
Using a SCEP Gateway to Distribute Certificates to Managed Devices
The Simple Certificate Enrollment Protocol (SCEP) automates the distribution of certificates at scale. Instead of manual provisioning, SCEP allows devices to request certificates directly from a Certificate Authority (CA) using...
Make Wi-Fi onboarding effortless with self-service setup, simple URLs, and certificate-based access
Simplifying the Onboarding Process
The most common questions we get in reference to onboarding new users aren’t related to using the software, but rather how to direct users to the software. SecureW2 has developed...
SMBs can deploy enterprise-grade MDM security in minutes with certificate-based authentication
Introducing an MDM Solution for SMBs
A common trend for SMBs seen across many industries is opting into a MDM infrastructure to replace or supplement a BYOD policy. For many organizations, a MDM system offers a...
Server certificate validation is essential to keep devices from connecting to rogue networks
Demystifying Server Certificate Validation
Credential theft is a high priority concern across many industries, and to combat it, many institutions have deployed WPA2-Enterprise wireless networks. This network type encrypts all network communications, as well...
SMBs face phishing, stolen passwords, and Wi-Fi hacks. Stop credential theft before it starts.
Credential Theft Threats Facing SMBs
Data and credential theft have become an increasingly prevalent concern for SMBs as more attackers choose to target them. It’s common to hear about large scale hacks, such as Target,...
No Results Found
Try adjusting your search or filter criteria