EAP-TLS Configuration for 802.1X

[evanmintzer]

I am working on a ISE 2.4 deployment and found a known issue where 802.1X authentication does not work when using Credential Guard with Win10. Therefore, I am looking into using certificates instead of PEAP. Does anyone have any good documentation on how to deploy certificate authentication for Windows clients? Or does anyone have any comments regarding Credential Guard and 802.1X?

[kvenkata1 · Accepted solution]

Please consult the following two discussions.

What is supported - Credential Guard & Windows 10

https://community.cisco.com/t5/identity-services-engine-ise/windows-10-credential-guard-issue/td-p/3602356

ISE Certificate based authentication

https://community.cisco.com/t5/policy-and-access/ise-certificate-based-authentication/td-p/3203813

- Krish