i must permit the access only users with machine-certificate and i need permit multi-client login on one computer.
in the acs global configuration setup i have checked only "allow eap-tls", in this way only certificate computer will can be accepted.
if i create one certificate template "computer" (on CA), the computer store this certificate in local computer, but during autentication procedure, the autentication is failed, and no view log in loggin failed on ACS.
if i instead create one user-certificate and i store in local user the login successfull
thx a lot for reply