ISE EAP-TLS and Windows 7 SP1 certificate pop-up challenge

[Shaun Muller]

Hi

Im interested to know who out there might be experiencing the following issue..

I have a customer who has Windows 7 and Windows 10, and using EAP-TLS. The customer is also running MSFT Lync, and when connecting to the network, will at times see a certificate pop-up, forcing the customer to choose a certificate to authenticate with. MSFT recommended a hotfix for Windows 7, too "suppress" the Lync certificate, but this did not solve the issue.

Thanks for any feedback.

[Greg Gibbs]

Hi Shaun,

This is a common problem as the Win7 supplicant does not provide a real certificate matching capability that Win10 provides.

See the following post:

Re: ISE 2.3 certificate authentication behavior

[Jason Kunst · Accepted solution]

If customer wants more control and stability for the supplicant they should perhaps evaluate anyconnect Network access module