Welcome to Cisco Support Community. We would love to have your feedback.
For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.
I have a quick question, is the user PC need to be join first in domain so the ACS will validate the CA?
Go to Solution.
This link explains why you need machine authentication and why PEAP requires PC joined domain:
Hope it helps!
If the user needs to log into the domain, the PC need to join in domain first and you need to use machine authentication.
thanks for the reply. May i know also the reason why?
Thank you very much my friend.