ise does not prompt for User Credentials, only always asking for certificate

[Imran Ahmad]

Hello,

My wireless clients do authenticate through Digital_Certificate fine. but i want to do User Based authen on some clients, but this does not work at all.  i tried checking all Authorization, Authentication Policies everything is corectly configured.

On a wireless client, no Certificate is installed  when i try to connect to a protected wifi, then i displays a message saying "Windows was unable to find a certificate to log you on to the network " 

i want it to ask for user credentials but it does not ask, the wifi stucks in Validating identity status

What can be the issue? 

[Mikael Gustafsson]

What are the clients security settings on the wireless interface?

Cheers

[Imran Ahmad]

Hello Mikael,

One thing i just found. i think there is any sort of compatibility issue between ISE and Client(having Windows XP). because i can normally authenticate from Windows7 or 8 clients by using User_Based_Authentication.  i only can not do it through windows-xp clients. 

on other hand, i can authenticate using digital_cert from win-xp clients, but can not authen through user_based authen, and it is always saying "windows was unable to find certificate to log you on"

Is there really compatibility issue or ???

[Venkatesh Attuluri]

Client Machine Operating Systems and Agent Support in Cisco ISE

Client Machine Operating System			Web Browser			Supplicants (802.1X)		Agent	VPN
Microsoft Windows XP5
Windows   XP Media Center Edition, SP2, SP3 Windows   XP Tablet PC, SP2, SP3 Windows   XP Home, SP2 Windows   XP Professional SP2, SP3 Windows   XP Professional x64, SP2	•Microsoft   IE 6, 7, 8, 9 •Google   Chrome 11, 12, 13, 14, 15, 16 •Mozilla   Firefox 3.6, 9	•Microsoft   Windows XP 802.1X Client •Cisco   Secure Services Client (SSC) 5.x •AnyConnect   Network Access Manager		1.2	4.9.0.1008		4.9.0.1005	AnyConnect   version 3.1.00495

ensure that the latest Windows hotfixes and patches are installed on Windows XP clients