MacOS with Do1x

[Saeed Abd Elhalim Hamada]

Dears 

i`m have customer use Do1x (witless) user + Machine Auth using (TEAP (Mschap for user , TLS for machine )) << for windows (no posture no cisco any connect )

now he need to apply cisco ise for  8- 10 laptops  (wireless) with Mac OS like the Windows os 

no MDM

so is there any guides or article or anything to make this ?

[Mohammadreza Hadi]

see the picture i attached for you..

+ see this URLs.. maybe help..

https://community.cisco.com/t5/network-access-control/configure-802-1x-macos-cisco-ise/td-p/4575375
https://support.apple.com/en-ae/guide/deployment/depabc994b84/web

[ahollifield]

A couple of things:

• You should not be using MS-CHAP in 2026. That uses broken encryption. Use user certificates only.
• You need an MDM to configure macOS. How else will you get certificates to the devices? how will you manage certificate renewals?

[Arne Bier]

I agree with @ahollifield - when we involve certificates on devices we need to think longer term - and that includes maintaining those certs - the instructions of how to manually, lovingly configure each device is nice for a lab or PoC - but in production, you're asking for trouble. Apple used to have an app called the Apple Configurator, which ran on a Mac and you cabled the iPad/iPhone to the Mac to push certs and other profiles onto it. But again, will you (or do you want to) do this for 8 devices repeatedly?  Some MDM systems are not that expensive and you may already be paying for MDM