topic Windows 7 client failing EAP-TLS Certificate based authorization in Network Access Control

Windows 7 client failing EAP-TLS Certificate based authorization

cdannenberg — Wed, 01 Nov 2017 21:57:07 GMT

Attempting to authenticate Windows 7 clients with EAP-TLS utilizing only certificate based authorization.

Receive errors on the client that wifi network authentication failed due to a problem with the user account with EAP Error 40420110.

With this error, clients are not even reaching ISE for authentication or authorization.

Re: Windows 7 client failing EAP-TLS Certificate based authorization

ognyan.totev — Thu, 02 Nov 2017 06:56:43 GMT

Hi ,first check your wireless controller is set . Check client pc with windows 7 for services run for dot1x authentication .The service is WLAN autoconfig this is for wireless,it must be set to automatic by default is stopped. Than set to network adapter

smart card or certificate .

Re: Windows 7 client failing EAP-TLS Certificate based authorization

Craig Hyps — Thu, 02 Nov 2017 12:05:15 GMT

Also, verify your Certificate Profile is properly configured. With the exception of binary comparison, the Authentication itself is based on PKI trust, but authorization is based on the extracted identity. The Cert Profile is used to determine the identity of user for the purpose of Authorization. Typically that is the certificate Subject CN.