topic How do I require client and machine Cert when using EAP-TLS on wireless? in Network Access Control https://community.cisco.com/t5/network-access-control/how-do-i-require-client-and-machine-cert-when-using-eap-tls-on/m-p/3953642#M455917 <P>I have the same policy in ISE being used for both wired and wireless authorization. In the wired auths I see both user and computer certificates but on the wireless side I only ever see computer certs being used. How do I change this behavior so that it matches the wired ?</P> Tue, 05 Nov 2019 20:54:30 GMT paulle 2019-11-05T20:54:30Z How do I require client and machine Cert when using EAP-TLS on wireless? https://community.cisco.com/t5/network-access-control/how-do-i-require-client-and-machine-cert-when-using-eap-tls-on/m-p/3953642#M455917 <P>I have the same policy in ISE being used for both wired and wireless authorization. In the wired auths I see both user and computer certificates but on the wireless side I only ever see computer certs being used. How do I change this behavior so that it matches the wired ?</P> Tue, 05 Nov 2019 20:54:30 GMT https://community.cisco.com/t5/network-access-control/how-do-i-require-client-and-machine-cert-when-using-eap-tls-on/m-p/3953642#M455917 paulle 2019-11-05T20:54:30Z Re: How do I require client and machine Cert when using EAP-TLS on wireless? https://community.cisco.com/t5/network-access-control/how-do-i-require-client-and-machine-cert-when-using-eap-tls-on/m-p/3953644#M455919 <P>If the computers are only sending computer certificates on Wireless, that is a supplicant configuration issue.&nbsp; You can create a Wireless GPO to push out the correct supplicant settings.&nbsp; If using the built-in Microsoft supplicant, there is an option to do "Machine or User Authentication".&nbsp; It is probably configured to do "Machine Authentication Only". &nbsp;</P> Tue, 05 Nov 2019 21:00:49 GMT https://community.cisco.com/t5/network-access-control/how-do-i-require-client-and-machine-cert-when-using-eap-tls-on/m-p/3953644#M455919 Colby LeMaire 2019-11-05T21:00:49Z Re: How do I require client and machine Cert when using EAP-TLS on wireless? https://community.cisco.com/t5/network-access-control/how-do-i-require-client-and-machine-cert-when-using-eap-tls-on/m-p/3956008#M455920 <P>Like <A href="https://community.cisco.com/t5/user/viewprofilepage/user-id/624773" target="_blank">Colby.LeMaire</A>&nbsp;said, this depends on the supplicants. Even with Windows native supplicants, the auth mode is configured for individual wireless networks and wired connections.</P> Sat, 09 Nov 2019 03:54:32 GMT https://community.cisco.com/t5/network-access-control/how-do-i-require-client-and-machine-cert-when-using-eap-tls-on/m-p/3956008#M455920 hslai 2019-11-09T03:54:32Z