topic Re: Cisco ISE 802.1x Wired Authentication for MacBooks Using JAMF Cloud in Network Access Control

Cisco ISE 802.1x Wired Authentication for MacBooks Using JAMF Cloud

colbysunday — Tue, 22 Sep 2020 17:29:53 GMT

We're currently running into an "issue" where the MacBook's will not automatically authenticate to the wired network without user interaction. We have 802.1x authentication working by choosing the certificate manually. We would like to have this work in the background so the user will not have to choose any certificate when authenticating to the wired network. We know we can try using scep, but would like to avoid this as well if at all possible. Has anybody had any luck with this?

Re: Cisco ISE 802.1x Wired Authentication for MacBooks Using JAMF Cloud

thomas — Wed, 23 Sep 2020 02:49:57 GMT

This sounds like a behavior issue of the macOS' 802.1X supplicant due to the configuration by JAMF MDM.

Have you tried researching with JAMF?

Computer Configuration Profiles :

Some configuration profile payloads and settings available in Jamf Pro may differ from their implementation in Apple’s tools. For more information on these settings, see the Configuration Profile Payload Settings Specific to Jamf Pro Knowledge Base article.

When you create a computer configuration profile, you must specify the level at which to apply the profile—computer level or user level. Each level has a unique set of payloads and a few that are common to both.

There are two different ways to distribute a configuration profile: install it automatically (requires no interaction from the user) or make it available in Self Service. You can also specify the computers and users to which the profile should be applied (called “scope”).

Also see:

Certificate Preference MDM payload settings for Apple devices

Payload best practices for Apple devices

Re: Cisco ISE 802.1x Wired Authentication for MacBooks Using JAMF Cloud

colbysunday — Wed, 23 Sep 2020 12:20:10 GMT

Yes, we've reached Jamf for support. I am going to test today with user level vs. computer level as the profile is set now and see what the results are.