Non Domain think client of Windows and Linux

[michalkleczek]

Hi,

I have problem with possibilities of deployment.

I have computers with think clients (Windows-OS and Linux) which have some 802.1x possibilities. EAP-TLS can work too.

These computers are not in Domain.

I don't want to use MAB on ISE. Is it possible to use some certificate to authenticate this devices?

In my opinion there is a problem, when computers are not in domain.

Regards

Michal

[jan.nielsen]

Do you mean thin clients? If so, you will need to have a deployment tool for those devices, to do the certificate enrollment for you, or do it manually. Otherwise maybe PEAP with AD user/pass could be an option.