cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2105
Views
5
Helpful
3
Replies

Authenticating with several certs

ehermansen
Level 1
Level 1

Hi

 

I have an issue with certicatebased wifi authenication on win10 client.

Problem is that the client have several certs under personal folder under machine. ISE authentication only works with one of them. The client / ise seems to randomly use one of them making authentication very unstable. Is there a way to use a specific cert for dot1x auth

1 Accepted Solution

Accepted Solutions

Mike.Cifelli
VIP Alumni
VIP Alumni

You have the ability to configure certificate selection.  For the native supplicant under 'Smart Card or Other Certificate Properties' when connecting section select use a certificate on this computer and click advanced.  Under advanced section you will see the options that you could use/reference.  Your best bet IMO is to determine and test this capability that meets your environment's needs.  HTH!

View solution in original post

3 Replies 3

Hi,

You can use NAM Profile Editor to build an XML file that specifies which
certificate to use for dot1x authentication. Then you can push this file to
your client using GPO.

This can answer your question.

https://community.cisco.com/t5/network-access-control/certificate-selection-on-nam/td-p/3091262

**** please remember to rate useful posts

ehermansen
Level 1
Level 1

Thanks but this is just native win10 client 

Mike.Cifelli
VIP Alumni
VIP Alumni

You have the ability to configure certificate selection.  For the native supplicant under 'Smart Card or Other Certificate Properties' when connecting section select use a certificate on this computer and click advanced.  Under advanced section you will see the options that you could use/reference.  Your best bet IMO is to determine and test this capability that meets your environment's needs.  HTH!