Cisco ISE SSL/TLS Authentication Failures

[Sukru Erdal]

Domain Computer authentication (SSL/TLS not checked in computers) is being used in a network. Microsoft Windows 7 is the operating system of clients. In Cisco ISE SSL/TLS failure messages are noticed:

"PEAP failed SSL/TLS handshake because the client rejected the ISE local-certificate" Funny thing is no SSL/TLS is active in the network. How is this possible?

[mohanak]

Please refer the link:

https://supportforums.cisco.com/discussion/11697966/cisco-ise-authentication-failed-because-client-reject-certificate

[Sukru Erdal]

Actually I've already checked this post. However, the client computer is not configured to validate server certificate.

[nspasov]

Can you post screenshots of the supplicant's configuration?

[Stephen McBride]

I have intermittently had this issue with ISE in most builds for the better part of a year or so. SOme days everyting is fine other days this occurs for hosts even when validate is not ticked. Tell me about the server certificate on the ISE policy node - is it a wildcard certificate?

[Saurav Lodh]

what kind of Certificate ISE is using? self signed or 3rd party? I will suggest you to generate the ISE's Local certificate again.