In Cisco ise, eap tls used to end user authentication

[palani2010]

Which certificate will be used on endpoint or supplicant is that trusted certificate should install it ?

Why do we need system certificate with eap usage ?

[Marcelo Morais · Accepted solution]

Hi @palani2010 ,

 please take a look at: Understand and Configure EAP-TLS with a WLC and ISE as an example.

" ...

3. The Authentication Server (Cisco ISE) responds with an Access-Challenge packet that contains:

• TLS Server Hello
• Handshake Message
• Certificate
• Server Key Exchange
• Certificate Request
• Server Hello Done.

4. Client (Supplicant) responds with a EAP-Response message that contains:

• Certificate - Server can validate to verify that it is trusted.

... "

in the link provided, please search for: Trust Certificate on ISE and Client for EAP-TLS.

Hope this helps !!!