Can SDA support eCert authentication?

[Rich Yim]

I know SD Access can assign a port with closed authentication template for 802.1x authentication. I would like to know can the port authenticate user using eCert authentication?

[jedolphi]

Hi Rich. More information required please. What is an "eCert" and how does the customer want to use it in the authentication process? I did a few quick searches for "eCert" but can't find anything conclusive. Jerome

[Rich Yim]

Sorry that I should not use the term eCert authentication. What I am looking for is to use EAP-TLS for authentication. Some customers want to adopt BYOD. Then they will use MDM to enrol electronics certificate to their notebook or tablet. My ask is can we use the 802.1x authentication on our Fabric Edge to do the EAP-TLS authentication?

I saw a Cisco link for the setup of the ISE for EAP-TLS:

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/214975-configure-eap-tls-authentication-with-is.html

Moreover, there is a youtube available for EAP-TLS:

https://www.youtube.com/watch?v=EHchrxUTtTg

I did not have time to test it on my SDA lab yet. Therefore, I don't know if it will work.