Cisco 2500 WLC with Wndows 2019 NPA?

[Wasserflo]

Hi, we have a 2500 WLC here and it's still working with a Windows 2008 NPA and the AD username/pw.

I want the NPA now moved to a new 2019 server. I have exported the config and imported into the 2019.

I have added the new server as Radius server in the 2500. Ping from here works.

But I can't connect to the network. The Eventlog says:

(It's from a german server, so here is the original, followed by my translation)

Der Client konnte nicht authentifiziert werden, da der angegebene EAP (Extensible Authentication-Protokoll)-Typ vom Server nicht verarbeitet werden kann.

The client can't be authenticated, because the EAP type can not be processed from the server.

Any thing I can do here to make it work with 2019?

Cheers

Florian

[Kasun Bandara]

you can enable more EAP types in your NPS policies and check. also check below thread, that will give some insight about another eap issue

https://community.cisco.com/t5/wireless/wlc-nps-eap-tls-machine-certificate/td-p/3913871

[Wasserflo · Accepted solution]

It's working now.

The solution was to install a client certificate on the new installed server.