Machine authentication does not register on ISE logs

[donnie]

Hi all,

My 802.1x environment is using ISE version 2.4 and my NAD is cisco WLC AIR-CT3504.

The policy set in place require my wireless clients to pass machine cert and user cert authentication before they can connect to my network.

However on adhoc basis i do not see the machine authentication on ise radius logs for some of my wireless clients, but when user login to same affected machine, i can see user authentication on ise radius logs but the machine would not be able to connect to my network as it does not have a valid machine cert authentication. My clients are windows 10 version 1809. 

How can i solve this? TIA!

[hslai · Accepted solution]

Please take a look at the existing discussions, such as

• Solved: User AND Machine Auth - Sleep mode
• Machine AND User Authentication Issue

With wireless, it could take time for the wireless adapter to find and connect to the network and that might not always happen in time before the user logins.