802.1x with AD certificates

[manvik]

How to implement certificate based 802.1x authentication network access using ISE & external identity store as AD.
Should all the client certificates be created in AD CS and pushed to client devices?

[Rob Ingram]

@manvik if the devices are joined to the AD domain, then configure the Group Policy objects (GPO) for the machines/users to enroll and renew the certificates automatically.

[manvik]

thank you any steps/Guide on the GPO??

[Rob Ingram]

@manvik try this - https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj717253(v=ws.11)