Windows 10: TEAP GPO configuration

I am trying to configure 802.1x authentication method TEAP for Cisco ISE. I was able to create a GPO for Windows 10 but when I try to create it for Windows 11 the authentication method is PEAP. Here is the guide I used https://community.cisco.com/t5/security-knowledge-base/teap-for-windows-10-using-group-policy-and-ise-teap/ta-p/4134289/page/2/show-comments/trueI worked with Cisco and they said it might be a supplicant issue with Windows.

:)

 

TEAP GPO on Windows 10

Hello everyone,



Let me explain my issue.

I configured a GPO to apply 802.3x "settings" (Computer Configuration, Policies, Windows Settings, Security Settings, Wired Network (IEEE 802.3) Policies with "Microsoft: EAP-TEAP" as a Network Authentication method:





Long story short: Windows 11 applies the GPO but Windows 10 fails.

I also created a LAB: same results.

I tried with both 20H1 (first windows 10 version to support TEAP) and 22H2 versions and I get the same behavior.

Basically on a W11 client everything works and by looking at settings everything is configured as per GPO ("this settings is managed by your administrator"):







On a W10 client the GPO seems to be completely ignored: also Network Authentication revert to "Microsoft: PEAP (Protecetd EAP)":







The strange thing is that this only occurs if I select a Root Certificate in the "TEAP Properties" window (see above) and if I select "Microsoft EAP: TEAP" as Network Authentication method: if I don't select any Root Certificate in the "TEAP Properites" window the GPO is also applied to Windows 10.

Please notes that I have a standalone Offline root CA and an Enterprise Issuing CA (2-tier PKI hierarchy) but even if I select a public Root Certificate (ie Entrust) I get the same.

Any help would be much appreciated.

Thank you very much.

Andrea

 

is there any demand for a system configurator?

Processor(V) <--drop down arrow
-AMD(V)
--Socket(V)
---AM2(V)
----List of cpu's
---939(V)
----List of CPU's
-Intel(V)
--Socket(V)
---775(V)
----List of cpu's
---771(V)
----List of CPU's


etc etc.

 

TEAP primary and secondary EAP method missing in Windows server 2022 drop downs

Running Windows server 2022 21H2 20348.1607 and trying to configure a GPO for TEAP authentication method. I am able to select TEAP as network authentication method, however the drop down to select primary and secondary EAP methods are empty. I am able to configure EAP-TLS or PEAP-MSCHAPv2 without issues.

I have tried all combinations of User / Computer authentication and tried creating new and editing existing network profiles. How do i get the inner methods to show up in the drop downs?