topic User/Machine ISE Authentication in Network Access Control

User/Machine ISE Authentication

Sakun Sharma — Fri, 08 Mar 2019 04:03:04 GMT

How does ISE detect if the cliet is a user or machine? I am trying to authenticate a machine certificate using EAP-TLS, but ISE goes to AD and check for user certificate instead of machine account?

If I edit the certificate CN to hosts/<name> then ISE will lookup for machine account. But how does ISE identify is it a user or machine?

ISE version 1.4

Thanks

Re: User/Machine ISE Authentication

ognyan.totev — Fri, 08 Mar 2019 04:35:03 GMT

Hi, ypu must set the windows to computer authentication,there are 3 choices: computer auth,user auth , and both.You must be sure that services on windows are properly running. Wired autoconfig and Wlan authoconfig , you can find them under services.msc

Re: User/Machine ISE Authentication

Sakun Sharma — Fri, 08 Mar 2019 05:51:00 GMT

I forgot to mention, I am trying on iMAC. In the configuration profile from JAMF I don't see any such option.

But thanks for the comment, it is helpful in troubleshooting Windows client.

Thanks