windows 8/10 non-domain can login radius windows 2016 except Certificate

[info@toyoseikan.co.th]

My lab test NPS windows 2016 and Certificate with Cisco 2504 Firmware 8.3.143.0 configuration Radius everything work.
but Client non-domain windows 8/10 and some mobile can login my SSID(802.1x) without Certificate.

Please advise about this case Thank you.

[Scott Fella]

That is because you are probably allowing PEAP protocol in NPS. In order to authenticate using a computer certificate, you need to specify EAP-TLS. You can search “Radius NPS EAP-TLS” and find various links on what you need to do.

[info@toyoseikan.co.th]

Do you mean EAP Type PEAP to Remove ?

[Scott Fella]

Yes... should only be EAP-TLS

[Scott Fella]

Here is a guide I found:

https://networklessons.com/uncategorized/peap-and-eap-tls-on-server-2008-and-cisco-wlc/