https://community.cisco.com/t5/network-access-control/802-1x-with-ad-certificates/m-p/5254896#M594662 <P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/161770">@manvik</a> try this - <A href="https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717253(v=ws.11)" target="_blank">https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717253(v=ws.11)</A></P> <P>&nbsp;</P> Thu, 30 Jan 2025 16:17:46 GMT Rob Ingram 2025-01-30T16:17:46Z https://community.cisco.com/t5/network-access-control/802-1x-with-ad-certificates/m-p/5254890#M594658 <P><SPAN>How to implement certificate based 802.1x authentication network access using ISE &amp; external identity store as AD.<BR />Should all the client certificates be created in AD CS and pushed to client devices?</SPAN></P> Thu, 30 Jan 2025 16:06:21 GMT https://community.cisco.com/t5/network-access-control/802-1x-with-ad-certificates/m-p/5254890#M594658 manvik 2025-01-30T16:06:21Z https://community.cisco.com/t5/network-access-control/802-1x-with-ad-certificates/m-p/5254894#M594660 <P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/161770">@manvik</a> if the devices are joined to the AD domain, then configure the Group Policy objects (GPO) for the machines/users to enroll and renew the certificates automatically.</P> Thu, 30 Jan 2025 16:11:48 GMT https://community.cisco.com/t5/network-access-control/802-1x-with-ad-certificates/m-p/5254894#M594660 Rob Ingram 2025-01-30T16:11:48Z https://community.cisco.com/t5/network-access-control/802-1x-with-ad-certificates/m-p/5254895#M594661 <P>thank you any steps/Guide on the GPO??</P> Thu, 30 Jan 2025 16:13:01 GMT https://community.cisco.com/t5/network-access-control/802-1x-with-ad-certificates/m-p/5254895#M594661 manvik 2025-01-30T16:13:01Z https://community.cisco.com/t5/network-access-control/802-1x-with-ad-certificates/m-p/5254896#M594662 <P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/161770">@manvik</a> try this - <A href="https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717253(v=ws.11)" target="_blank">https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717253(v=ws.11)</A></P> <P>&nbsp;</P> Thu, 30 Jan 2025 16:17:46 GMT https://community.cisco.com/t5/network-access-control/802-1x-with-ad-certificates/m-p/5254896#M594662 Rob Ingram 2025-01-30T16:17:46Z