EAP-TLS 802.1x Client Certificate Validity Period - Best Practise

[A32]

Hi, hoping to get some feedback around best practice on certificate validity periods for EAP-TLS certficates for 802.1x clients.

Thoughts around setting expiry for over 2 years etc.

[ccieexpert · Accepted solution]

1 year is the most common and  if you can renew using GPO other means/ MDM etc, then that is good. but 1-3 years is OK with 3 being the max.. and you to make sure you have a way to do certificate revocation...