802.1x PEAP - Certificate Warning

[Sankar Rajasekaran]

Hi,

I have recently started receiving a certificate related warning whenever a EAP authentication happens. We have enabled 802.1x authentication in the switch port and use Cisco ISE (2.3, patch 5) as authentication server. The certificate is signed by internal CA and we have the root CA certificate installed in the trusted certificate store. Need some help in resolving this issue.

 

[Sankar Rajasekaran]

The operating system is windows 10 and windows 8.1.

[Mike.Cifelli]

Are you using the Windows Native supplicant? If so, under the Protected EAP Properties and Smart Card or other Certificate Properties make sure your trusted root cert is there. You can push the configuration via GPO. I am pretty sure that the server thumbprint you are seeing in the error is the thumbprint from the ISE certificate. Also, make sure you have the intermediate cert in the host's intermediate store.