Hi all,
We've been using 802.1x authentication at my company for about a year now and have successfully gone through the process of signing the phone certificates for our 79xx models, but not the 8811 models. The key difference we've found is in the issued certificates for the two models. The common name on the 79xx models read SEP<mac address> whereas the 8811 models read CP-8811-SEP<mac address>. This poses a problem because the certificate common name, which is also the username for the phone's account in our Active Directory to authenticate against the NPS, is too long for the NPS to reference. We know we can strip the CP-Model under the connection request policy of the NPS, but that won't help us because the certificates themselves cannot be modified. Is there another solution?
Our CUCM is on version 10.5.
Thanks,
