Cisco Wireless Authentication

[ejdrijin1]

Hi,

Is it possible to make authentication with both user and computer certificates with a Windows Network Policy Server?

Thanks.

[Ben Walters]

It really depends on the client's supplicant, the Windows native supplicant will not handle both user and machine authentication, it is one or the other.

If you use Cisco AnyConnect as a supplicant you can do EAP chaining which allows authentication of both user and machine at the same time. However I can't say for sure if the AnyConnect supplicant will do EAP chaining with a Windows NPS.

[ejdrijin1]

Thanks for your reply.

So you can use cisco any connect as your client and authenticate with the Windows NPS?

I am assuming that you will use the cisco network manager, right?

Thanks.

[Ben Walters · Accepted solution]

Yes, you can use the Cisco Network Access Manager (NAM) to authenticate to you NPS server, it basically replaces the windows native supplicant and supports several authentication modes.