Cross posting in the cnMaestro category hopefully to get more views.
I’m curious if anyone has done this, or if this is even supported. I have a mix of X7, XE, and XV access points and they are installed at remote, dissimilar, somewhat unmanaged locations. Does anyone know if it is possible to install a certificate on the APs and have the APs utilize MTLS for their connection to on-prem cnMaestro? I’m looking at front-ending an internet-facing on-prem instance of cnMaestro with cloudflare and have clouldflare police the connections from the remote APs by validating the MTLS cert. If the remote connections can’t present a valid cert cloudflare won’t allow the connection to pass on to cnMaestro. This would not require any changes to the on-prem instance of cnMaestro as the validation (firewalling if you will) would take place at cloudflare.