topic Have you considered using a in Wireless

Two factor authentication on wireless

Daniel Hood — Mon, 05 Jul 2021 11:44:55 GMT

We've got a wireless network set up already and we're getting a Cisco ISE for this project. We're investigating deploying two factor authentication, with the two factors being: Domain Username/Password and a Certificate.

Is the only way to do two factor authentication like this with EAP-Chaining?

Will EAP-Chaining work on Android and Apple IOS devices?

Have you considered using a

Philip D'Ath — Wed, 09 Mar 2016 23:31:27 GMT

Have you considered using a USB secure certificate token store instead? An example is something like this:

http://www.safenet-inc.com/data-protection/password-protection-applications/?aldn-true

Basically you issue a certificate, and it is stored on the USB token. You give this to the user along with (usually) a PIN.

The user plugs the token into their machine, and they get asked for the PIN. This unlocks the certificate store, and it now shows up as a normal certificate store in windows.

Being a normal certificate store you can use the certificate for WiFi authentication, VPN authentication, Email encryption, etc.

You may be able to use other methods aside from a PIN. I have only seen it used with a PIN.

Actually this is a better

Philip D'Ath — Wed, 09 Mar 2016 23:32:14 GMT

Actually this is a better link.

http://www.safenet-inc.com/multi-factor-authentication/authenticators/pki-usb-authentication/

Refer the link : https:/

mohanak — Thu, 10 Mar 2016 01:55:25 GMT

Refer the link : https://supportforums.cisco.com/discussion/12727161/how-can-i-perform-two-factor-authentication-nps-radius