Introduction
Welcome to EasyRadius, the easy-to-use radius solution for EAP-TLS client certificate authentication.
What is EasyRadius
EasyRadius is Azure-based SaaS radius service that is specifically built to work together with EasyScep Certificate Authority, but it can also work with other authorities as long as their CRL/OCSP endpoints are public available.
In this documentation we give a brief introduction to on-boarding in the Azure Marketplace, configuration in Microsoft Intune and practical use examples for client certificate based authentication.
On-boarding EasyRadius
EasyRadius is a SaaS solution delivered thru the Microsoft Marketplace and provisioning is integrated into the Azure Portal.
Signing up
To get started, go to the EasyRadius Azure Marketplace listing here or simply open the Azure Portal and type "EasyRadius" in top search bar.
When you are in the Azure Portal, you will get the following screen where you need to select which subscription and resource group you want to use for provisioning, this is primarily relevant for billing scope.
You will also need to name your EasyRadius instance - we suggest a name like EasyRadius-Production to make it clear what it's for.
Important: Ensure that the selected plan and renewal setting is correct before continuing
After you have filled in the required information, confirm your settings by clicking review + subscribe, now the service is getting provisioned. It typically takes less than 1 minute before you can continue with initial configuration.
When you see the above screen, you can continue by clicking "Configure account now", this will bring you to the initial on-boarding wizard.
Completing the on-boarding wizard
You should now see the EasyRadius on-boarding wizard welcome screen. Click "Next Step" to continue.
Fill in your Organization Name, contact email and select deployment region(s) for your EasyRadius instance. If you have selected a high-availability plan, then you need to specify both primary and secondary region, and they must not be the same.
Fill in the wanted name for your readius server certificate. If you are in-doubt about custom hostname, just leave it empty and a generic one will be created. If configured correctly this name will not be seen by any clients.
After you have filled in all settings then you can click "Deploy".
Deployment is now started, it will typically complete within a few minutes. You can close the page or wait until provision is completed. Page will refresh when provision is completed. If you close the window, you can always access it again from the Azure Portal, just search for "SaaS" and you can see all your SaaS subscriptions, incl. you EasyRadius instances.
After deployment is completed, browser should redirect you to the EasyRadius administration portal.
You can also access the EasyRadius administration portal directly at https://portal.just-cloud.net at any time.
Verifying your setup
When you access your EasyRadius instance in the administration portal, you will see the Status page, which shows you important information like status on endpoint status and Intune connectivity.
Next steps
When everything is healthy on the status page, you can now continue with configuration of you network equipment and wifi profiles.