NAC(EAP-TLS or PEAP authentication failled during SSL handshake

[stan_bianou]

Hi,

I have a strange problem. My NAC was working,then I change the domain name of my ACS to put in a labs domain, and now I have that authentication failure message.

I have the same certifate on the server and the host(windows XP SP 2 + CTA 1.0).I have modify the configuration related to the new domain.

Another symptom of my problem is that, sometimes the CTA is alternatively DETECTED and NOT DETECTED.

Can someone have an idea of what can be going on?

Thanks.

Stan.

[amaitre]

Hi,

the ACS certificate is bound to the ACS name and the domain name. If you change the domain name you have to generate a new certificate for the ACS.

Antoine