Windows Machine Cert Auth and User Auth

[scamarda]

Two node deployment 2.3P1. Don't have time to set this up in my lab would appreciate some help.  Have customer doing machine and user authentication via certificates using Windows native supplicant. Is it possible to use the attribute "wasMachineAuthenticated" in this scenario?  Customer would like to like the two together to validate machine and user auth for access.

[hslai · Accepted solution]

In order to use "wasMachineAuthenticated", the machine certificates need published to AD computer objects and the option "binary compare" enabled in the ISE certificate auth profile for the machine cert auth, besides checking "Enable Machine Access Restriction" in AD > Advanced Settings.

[scamarda]

Thank you for the information.  Much appreciated.