Windows 7 client failing EAP-TLS Certificate based authorization

[cdannenberg]

Attempting to authenticate Windows 7 clients with EAP-TLS utilizing only certificate based authorization.

Receive errors on the client that wifi network authentication failed due to a problem with the user account with EAP Error 40420110.

With this error, clients are not even reaching ISE for authentication or authorization.

[ognyan.totev]

Hi ,first check your wireless controller is set . Check client pc with windows 7 for services run for dot1x authentication .The service is WLAN autoconfig this is for wireless,it must be set to automatic by default is stopped. Than set to network adapter

smart card or certificate .

[Craig Hyps · Accepted solution]

Also, verify your Certificate Profile is properly configured.  With the exception of binary comparison, the Authentication itself is based on PKI trust, but authorization is based on the extracted identity.  The Cert Profile is used to determine the identity of user for the purpose of Authorization.  Typically that is the certificate Subject CN.