Cisco ise 1.3 - eap-tls user + machine auth problem on wireless

[Augustgood]

Hi all,

in my test environment i have one cisco ise with one wlc 5508 and 1600 aps. 

I try to test/verify wireless 802.1x eap-tls, but on user authentication with windows 7 i receive (on desktop) on right bottom icon the statement "netxx not authenticated" and when i logout the account (for machine authentication) i receive on ise the followinf error,client certificate does not match AD account certificate  - windows7_name_machine@domain.x.

Who can help me to solve that issue ? someon have an idea.. 

[jan.nielsen]

So, you are trying to do both user and machine certificate validation with eap-tls?

Have you checked that the machine actually has both ?

Does the machine get authenticated with it's certificate on bootup?

[Augustgood]

i disjoint the client to a domain and rejoin, and the problem it's resolved.

thanks