Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Does anyone know the proper format for the client MAC address in the ACS internal database such that it will authenticate 8021x queries from a cisco switch? Is it: 00-11-43-4A-B8-62 or: 0011.434A.B862 or maybe: 0011434AB862 or somet...
I am attempting to add Identity certificates to my 3000 concentrator. When I then attempt to enroll the added cert's using the hash texts created in the pks.txt files... I receive the "Bad Format" error. I verify that the applicance's FQDN is...
Actually I'm talking both:The specific question I posted was on correct formatting of MACs, (because I couldn't find it) but the broader issue I am trying to piece together is devising a way to have different policies on my SE's that can: a) Authenti...
Clarification: You said you do not have any certificates "on the machine". But you do have a server certificate (capable of authenticating the certs on the smart card) installed on your ACS correct? Without one, there is no way for the EAP-TLS fro...
I ran into the identical problem when I tried configuring my two SE's. I ended up opening a TAC case on it. Basically the engineer informed me that the "deliverance01" is the standard default when the machine comes up.I gamed it by configuring my d...
Ok, understand. If by "machine authentication" you mean MAC addresses, then you're right -IAS does not support that natively. I have been told by Microsoft that you can configure IAS to authenticate MACs but this requires a schema change in order t...