Optional Settings

OCSP Hard-Fail

In case you enable this setting, authentication requests will be rejected if your CA's OCSP responder is not available/reachable.

This setting determines how RADIUSaaS behaves, when the OCSP responder of your trusted CA cannot be reached.

By default, we recommend to disable OCSP hard-fail to increase the availability of the service by allowing authentication requests to be accepted even if the OCSP responder cannot be reached. With this soft-fail mechanism, and in case OCSP is not reachable, RADIUSaaS will only check if the incoming certificate was signed by one of the trusted CAs (and process the optional Rules).