Keytos Blog

Best network access control (NAC) solutions for Entra ID and Intune in 2026, securing laptops, phones, Wi-Fi, and users

The 5 Best NAC Solutions for Entra ID and Intune Shops in 2026, Ranked

October 25, 2026

Igal Flegmann

Compare the 7 best NAC solutions for Entra ID and Intune in 2026. We rank Keytos Shield, EZRADIUS, Portnox, SecureW2, Juniper Mist Access Assurance, HPE Aruba Central NAC and Cisco ISE.

Synced vs. device-bound passkeys in Entra ID - which passkey type should you deploy for phishing-resistant MFA

Should I Use Synced or Device-Bound Passkeys in Entra ID?

October 23, 2026

Aaron Crawfis

Synced vs. device-bound passkeys in Entra ID - learn where the private key lives, the risks of syncing, and the two-passkey setup we recommend for every user.

Can I use passkeys for Wi-Fi networks? A FIDO2 passkey authenticating to a WPA Enterprise Wi-Fi network through a RADIUS server using the EAP-FIDO draft

Can I Use Passkeys for Wi-Fi Networks? A Look at EAP-FIDO

October 21, 2026

Aaron Crawfis

Can you use passkeys for Wi-Fi? Learn how WPA Enterprise and RADIUS work, what the IETF EAP-FIDO draft proposes, and how to get phishing-resistant Wi-Fi today.

eMudhra CA key compromise explained - eight intermediate certificate authority private keys so weak that one was the number 4

eMudhra CA Key Compromise Explained: What Happened, Who's Affected, and What to Do

October 21, 2026 - Updated: October 26, 2026

Igal Flegmann

Eight eMudhra intermediate CA keys were so weak one was the number 4. Learn what happened, which CAs are affected, and how to protect your apps and devices.

Windows 11 laptop failing PEAP MS-CHAPv2 Wi-Fi authentication after the KB5127648 update while an EAP-TLS certificate-based connection to EZRADIUS cloud RADIUS succeeds.

KB5127648 Breaks PEAP Wi-Fi and 802.1X Authentication: What Happened and How to Fix It

October 14, 2026

Aaron Crawfis

KB5127648 broke PEAP Wi-Fi and 802.1X authentication in Windows 11. Learn why, how to apply a registry fix, and why EAP-TLS is the permanent fix.

Who are the best cloud RADIUS providers for Entra ID and Intune in 2026? Three cloud RADIUS services on a podium

What are the 8 Best Cloud RADIUS Providers for 2026, Ranked

October 11, 2026

Igal Flegmann

Compare the 8 best cloud RADIUS providers for 2026. We rank Keytos Shield, EZRADIUS, SecureW2, Portnox, RADIUSaaS, JumpCloud, IronWiFi, and Purple on PKI, Entra ID, and price.

Restrict Entra ID access to corporate-managed devices without Intune using Entra CBA

How to Lock Down Access to Entra ID From Only Corporate Managed Devices Without Intune

October 7, 2026

Keytos Team

Learn how to restrict access to Entra ID from only corporate managed devices without using Intune by leveraging certificate-based authentication with Entra CBA and Keytos solutions.

Federal network diagram showing Wi-Fi access points authenticating devices with EAP-TLS certificates through EZRADIUS cloud RADIUS hosted in Azure GCC High to meet FedRAMP wireless access controls.

How to Meet FedRAMP Wi-Fi Security Requirements with Keytos

October 5, 2026

Keytos Team

What does FedRAMP require for Wi-Fi security? Learn the NIST 800-53 wireless controls, why EAP-TLS is the gold standard, and how to move to cloud RADIUS in Azure GCC High. Click here for the full guide!

Move your Windows ADCS CA to the Cloud and modernize your whole Identity Stack

How to Migrate a Windows Certificate Authority (CA) to the Cloud

September 28, 2026

Keytos Team

When moving to the cloud, a question your security team will ask is, "How can I get an HSM-backed Certificate Authority / PKI in Azure?" We're here to help with EZCA!

Keytos Security Blog