Cisco ISE or MacOS

[Saeed Abd Elhalim Hamada]

Dears 

i`m have customer use Do1x (wirless) user + Machine Auth using (TEAP (Mschap for user , TLS for machine )) << for windows (no posture no cisco any connect )

now he need to apply cisco ise for  8- 10 laptops  (wirless) with Mac OS like the Windows os 

so is there any guides or article or anything to make this ?

[aleabrahao]

Take a look at this.

https://community.cisco.com/t5/network-access-control/machine-user-auth-for-mac-osx/td-p/3471203

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/214975-configure-eap-tls-authentication-with-is.html

[ahollifield]

Do you have an MDM? If not that's step one for MacOS.

[Saeed Abd Elhalim Hamada]

no i dont have MDM

[ahollifield]

Step 1 is an MDM. Without an MDM, properly configuring MacOS is not scalable and a nightmare.

[Karsten Iwen]

As @ahollifield already mentioned, an MDM would be the best solution. For this little amount of devices, the administrativ burden to implement one is perhaps too large. When there is no MDM, I use the tool dot1xProfile from ermitacode to generate a profile which can be installed manually on the device.