5400 authentication failed with 12948

[Eric23]

Hello !!

We recently came across an error with ISE and some Android devices.

The failure reason is:

12948 supplicant sent unexpected unencrypted tls handshake message instead of tls application data in peap protocol.

verify that supplicant is configured properly to conduct a full eap conversation with ise. Verify that supplicant does not any compatibility issue and that it is properly configure. This is a know issue on Android when conducting PEAP conversation after handshake is succeeded.

Has anyone come across this ?

Thank you,

[ahollifield · Accepted solution]

Public EAP certificate on ISE?  Correct SAN fields, etc?  Are these devices managed by an MDM?  What is the use-case for performing PEAP on these devices?