ISE Error Log: EAP-FAST PAC Issue

[Mike.Cifelli]

Can anyone explain the Failure Reason below that I am seeing in my radius live logs for an eap-fast session:

12962 Reject User Authorization PAC since its Initiator-ID does not match the Tunnel PAC Initiator-ID

I have user auth PACs configured for 12 hours.  This error occurred 4 hours after being deployed when an end user was at lunch so the PAC should have been good.  I appreciate the assistance in advance.

[hslai]

The message is added as part of the fix for CSCun45607.

If not already done and it happening frequently, please open a TAC case to debug further.