This is working on Cisco ISE 3.4 Patch 2 and Windows Server 2025.See this Bug ID and the available workarounds: CSCwn62873 : Bug Search ToolYou need to make a change to Group Policy for your Domain Controllers to get it working. So when you're on 3.4...

Greg,The field notice was posted here: https://www.cisco.com/c/en/us/support/docs/field-notices/742/fn74227.htmlIs it safe to assume that this only impacts Microsoft InTune deployments?My user and computer certificates are enrolled from Windows CA.  ...

My worry is that this Field Notices focuses heavily on InTune URI's and GUID's but does not adequately address scenarios where certificates are authenticated against Active Directory only (no InTune).  The Work Around / Solution, and Additional Infor...

I opened a case with TAC on this but all they're saying is that I need to upgrade to 3.2 Patch 7 to avoid issues. But Microsoft's KB article (KB5014754: Certificate-based authentication changes on Windows domain controllers - Microsoft Support) state...