ISSUE 12511 Unexpectedly received TLS alert message reject client

[yoga1]

I am having an issue with TLS on Windows 10 Pro. When I log in to the SSID using my Active Directory username and password, it works, but then I get an error saying “Can't connect to this network.” How can I fix this?

[balaji.bandi]

it works,

can you explain  above statement ? are you able to connect to Wireless able to get connectivity and only you see the error ?

what ISE version ?

is this for all the clients only Windows 10 Pro ?

check what kind of TLS version you have, new ISE 3.3 default  1.2 you can not disable that.

check the certs make sure client have the same certs 

make sure self signed certificate installed on the client PC

check ISE cert documentation :

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215621-tls-ssl-certificates-in-ise.html

[MHM Cisco World]

What is l2/l3 secuirty of this ssid

MHM

[yoga1]

i will just connect wireles by entering username and password, when click connect get the issue.

Windows 10 Pro users only appear the error.

for certificates I use from external company domain certificates, not using certificates from ise 3.3

[MHM Cisco World]

What you use 

Eap-tls or  teap or  peap ...etc.

MHM

[yoga1]

I use EAP-TLS and version ISE 3.3

[MHM Cisco World]

Are you sure ? 

Eap-tls not use username and password it only use cert.

Can I see screenshots of secuirty of this wlan 

MHM

[balaji.bandi]

i would suggest check the configuration both NAD/NAC and ISE and also client side configuration.

https://www.wiresandwi.fi/blog/cisco-ise-top-reasons-your-certificate-authentications-are-failing

[yoga1]

For the EAP case, I have already restored the default certificate from ise pointing to EAP authentication.