Windows 10: Specify Certificate for Wired 802.1x Authentication

I'm working on implementing 802.1x authentication on our wired/ethernet network using Cisco ISE and the native Windows 10 supplicant. I'll be using machine authentication with certificates. The issue I'm running into is that we have multiple Client Authentication certs all issued by the same CA installed on our machines and I can't find a way to tell Windows the exact cert I want to use for 802.1x. The most granular I can seem to get is to choose the Certificate Issues and certs that have the Client Authentication EKU but since that can match multiple certs on the machine it's not specific e

:)

 

Specify Certificate for Wired 802.1x Authentication

Thanks, posted to Specify Certificate for Wired 802.1x Authentication - Microsoft Q&A

 

Specify Certificate for Wired 802.1x Authentication

I'm working on implementing 802.1x authentication on our wired/ethernet network using Cisco ISE and the native Windows (10) supplicant. I'll be using machine authentication with certificates. The issue I'm running into is that we have multiple Client Authentication certs all issued by the same CA installed on our machines and I can't find a way to tell Windows the exact cert I want to use for 802.1x. The most granular I can seem to get is to choose the Certificate Issues and certs that have the Client Authentication EKU but since that can match multiple certs on the machine it's not specific enough. Is there a way to have Windows choose based on Template Name or something, or what is the proper way to do that?

 

How to we generate certificates for 802.1x wired authentication in windows NPS?

How to generate the CA, server, and client certificates in the NPS server for 802.1x wired authentication. We need these certificates for our application which supports 802.1x wired authentication. We want our device to get authenticated from NPS Radius, but generating the certificates is not clear.