Our University has a fleet of laptops that are available for students to check out. We had to updated the certificate on our ISE deployment that is used for RADIUS DTLS, EAP Authentication since it was going to expire. Now it is reported that students cannot log into these laptops without connecting to wired first. Previously apparently they could checkout a laptop and would log into it using their email address and it would let them log in even though they had not previously logged in. It apparently must have connected to wireless automatically before they logged in. I am newer to the university and am not sure how these machines were previously set up. I am told that our desktop people did update and push out the new certificate to the laptops but they are still not working as expected. Any ideas on how this might have been working and why it may be broken now? On the network side we only updated the ISE certificate. It seems like the laptop is not trusting the ISE certificate for some reason because when you try to log in you get the domain is not available message when trying to use wireless.
Any thoughts or assistance would be appreciated.
