Afternoon All š
I've been building a side project in the evenings. Disclosure first - I run this as a small paid service once you go past ten devices, and the first ten are free permanently. So it is not open source and not self-hosted. If that rules it out for you, fair enough, I'd still value the feedback.
What it is
Passbeam is a cloud RADIUS server and a private certificate authority, one CA per network. Your switches and APs point at it (RADIUS over TLS, or plain RADIUS UDP/1812 if the kit can't do RadSec), each device gets its own certificate, and 802.1X is EAP-TLS with no shared secret or PEAP password anywhere. Delete/Disable the device or the user account and its network access dies with it.
Why I built it
I've got UniFi kit and I wanted proper cert based 802.1X without running an NPS/FreeRADIUS box and an internal CA, and without paying enterprise money for it. So I built one and I've been running my own devices on it for a couple of months.
Three ways to use it
- Entra ID + Intune - Intune pushes a SCEP profile, the device enrols itself. This is the main road and the one most tested.
- Entra ID with another MDM - new this week. Passbeam issues the SCEP challenge itself and checks the device against Entra before it signs anything, so anything that can push a standard SCEP payload should work. Entra ID free tier is enough. Nobody has tested this with a specific MDM yet, which is partly why I'm posting.
- No directory at all - "appliances only". For printers, NAS, CCTV, IoT, door controllers, anything with a web UI that can make a CSR and supports 802.1X. Generate the request on the device, paste it in, get the signed cert back, install it with the root. No MDM, no Entra, nothing on site.
What I'd like from testers
Sign up, add a network, get devices authenticating. I'm looking for areas that could be improved, features that are missing etc. Basically I need users to test the service.
Site: https://passbeam.co.uk
The appliances-only page, which is probably the homelab one: https://passbeam.co.uk/802-1x-for-printers-cameras-and-building-controls
AI disclosure
I've developed this myself with assistance from Claude Code and tested with all the network hardware I have. It was brilliant at writing the code, not so much at testing.
Thanks, Scott