client failing tio auth on ISE 1.3

[rgilliland]

when trying to connect to a wireless network that i am trying to set up for machine and user authentication to connect;

i keep getting this error message on the ISE auth log.

12321 PEAP failed SSL/TLS handshake because the client rejected the ISE local-certificate

i have seen a lot published on the error but have yet to see anything that would give a clear understanding on what nayone did to resolve the issue.

i am using a self signed cert on the ISE server.  i have also unchecked the validate server certificate on the windows machine.  yet, i still get this error.

does anyone have any suggestions on how to resolve this issue?

thank you

rick g.

[Venkatesh Attuluri]

supplicant or client machine is not accepting the certificate from Cisco ISE. make sure cert is usage is selected for EAP, expiry date, checked default allowes protocols on ISE.. manually set it to trust the  ISE certificate . you can try to remove wireless network profile and recreate it