Post windows 10 1803 upgrade user shows MAC address instead of certificate hence unable to connect to ISE port

[siddhesh.parab@orange.com1]

Windows 10 1803 updated PCs are not able to connect to ISE configured switch port. we have checked logs on ISE and found that end users are showing MAC address instead of certificates hence it is mapped under MAB policy and not to 802.1x. policy ..... so all end user who uses windows latest update are not able to connect ISE port but works on non ISE port.

What could be the issue and resolution??

[Ben Walters]

 Are you using the windows supplicant? 

I would look at the client configuration and confirm that the 802.1x settings are correct and the proper services are running on the machine. If it isn't passing the correct credentials to the switch I am guessing something is missing on the client side. 

[siddhesh.parab@orange.com1]

supplicant is using win 10 (1803 Update)..802.1x is enable at supplicant site and for first few minutes supplicant shares MAC address to ISE instead of certificate.. hence they are not able to connect via ISE .. it works properly on non ISE switch ports...

Is there any setting required from supplicant end ?? because before win 1803 update everything was working fine.

Need suggestions....

[paul]

The supplicant only shared credentials with the switch/ISE.  There is no such thing as "supplicant only sending MAC address".  If the supplicant is not providing credentials to the switch the switch will fail over to MAB and send the MAC address to ISE.  The switch is sending the MAC address not the supplicant.  Figure out why your supplicant is not authenticating correctly.