we have dot1x configured on a site for authentication. upon failure of authentication the switchport is put into a guest vlan which is just a vlan going no where. we are seeing multiple failures for some reason causing several machines to get dumped into guest vlan. the only resolution in place at this site is to login to the devices having problems, delete the machine's certificate, reinstall, reboot. im curious how the client certificate is causing problems for login and what can be done for a more long term fix.
i know there is not a lot of information here. i can provide whatever is needed to help assist me. thanks