topic Authenticating with several certs in Network Access Control

Authenticating with several certs

ehermansen — Thu, 01 Oct 2020 18:09:41 GMT

I have an issue with certicatebased wifi authenication on win10 client.

Problem is that the client have several certs under personal folder under machine. ISE authentication only works with one of them. The client / ise seems to randomly use one of them making authentication very unstable. Is there a way to use a specific cert for dot1x auth

Re: Authenticating with several certs

Mohammed al Baqari — Thu, 01 Oct 2020 18:45:26 GMT

Hi,

You can use NAM Profile Editor to build an XML file that specifies which
certificate to use for dot1x authentication. Then you can push this file to
your client using GPO.

This can answer your question.

https://community.cisco.com/t5/network-access-control/certificate-selection-on-nam/td-p/3091262

**** please remember to rate useful posts

Re: Authenticating with several certs

ehermansen — Thu, 01 Oct 2020 18:53:23 GMT

Thanks but this is just native win10 client

Re: Authenticating with several certs

Mike.Cifelli — Thu, 01 Oct 2020 22:20:04 GMT

You have the ability to configure certificate selection. For the native supplicant under 'Smart Card or Other Certificate Properties' when connecting section select use a certificate on this computer and click advanced. Under advanced section you will see the options that you could use/reference. Your best bet IMO is to determine and test this capability that meets your environment's needs. HTH!