Windows 10: User EAP-TLS authentication for the first time

Hi community,


we are trying to develop 802.1X authentication to the network (LAN and WLAN) using the native Windows supplicant. The recommendation for the internal security department is to use certificates from the authentication. Second requirement is to have a user identity when an user is on a corporate machine.


Machine and user certificates are auto-enrolled using GPO policy.

Then we've configured clients using the GPO policy to have the required settings (same on LAN and WLAN network), including certificate selection

- 802.1X auth credential: Machine or user credential

- EAP type: Smart Card or other certificate


Machine certificates are enrolled during the imaging process when a machine is online and joined to the AD.


The problem which we currently have is I would say chicken or the egg problem.

When a user is logging on the machine for the first time, there is no certificate for such user. From the observation, there is around 50% change that the user cert auto-enrollment is finished during logon on LAN. But on WLAN is't failing all the time.


We are looking for some option to extend the machine authentication session to provide more time for the user cert auto-enrollment when the user is visiting the machine for the first time.

Is there any simple way how to auto-configure the supplicant to use "Machine credential" mode only in the case where is no user certificate available. And then re-configure the supplicant to the "Machine or User credentials" mode when there is a user certificate?


Thanks

Pavel

:)

 

EAP-TLS error

Hello, I am configuring an E66 with WPA2 EAP-TLS against IAS Radius and I always obtain the same error in the IAS event viewer.

denied accesss

Authentication-Type = EAP

EAP-Type = Smart Card or other certificate

Reason-Code = 16

Reason = Authentication was not successful because an unknown user name or incorrect password was used.

Has anybody tried E66 or similiar with EAP-TLS?

Any experiences?

 

Wireless EAP-TLS Authentication on Windows Phone 7

you can vote

here:

http://windowsphone.uservoice.com/f...9-add-eap-tls-authentication-support-for-wifi

or here:

http://windowsphone.uservoice.com/f...upport-for-all-wpa2-enterprise-wireless-encry

too make microsoft implement it

 

Wireless EAP-TLS Authentication on Windows Phone 7

Dear godfreysseggwanyi,



Thank you for posting at the community.



Please read following thread about Wireless EAP-TLS Authentication on Windows Phone 7

http://answers.microsoft.com/en-us/winphone/forum/wp7-wpdevices/wireless-eap-tls-authentication-on-windows-phone-7/80808f0f-71f3-4fb0-882e-0bc8683e3c5f



We would appreciate your feedback in regard to further assist you.



Kind Regards,



Rafal S’