Cisco ISE Cert spoof or transfer.

[sixthreecisco]

I have a question about Cisco ISE and Certs.  Let's say I am using ISE and 802.1x and certs.  If a hacker or unauthorized user was able to spoof the MAC of an authorized machine, and was also able to transfer the ISE cert from the authorized machine to the machine that is spoofing the MAC, would the hacker's machine then be authorized?

[jan.nielsen]

Yes, they would need the private key of the machines certificate though, and they would not need to spoof anything, but just use the cert to do an actual authentication with it. But this is not really anthing to do with ISE, but just basic 802.1x

[nspasov]

Jan is absolutely correct (+5). You can even set the private key to "non exportable" but with the proper tools you can still extract it. 

This is why TEAP is the way to go. I just wish Microsoft would wake up and realize this :)