Do1xt Cert authentication POP up's

[Spiky.Steve]

we rolling out DOT1x with certifitcate machine/user authentication, 

clients connect ok, but after a period of time, they're getting certificate popup, asking to use a cert,  

how can i supress this, so all the clients  dont keep getting they popup's

using ACS 5.8.1 and windows 10 clients

thanks

[Spiky.Steve]

so i think this is due to the anACS setting, that ,machine policy is set to 30 days

is this correct?

[patoberli]

Are the clients configured manually, group policy or maybe even using Intels own 802.1x client?

[Spiky.Steve]

settings are sent to clients when built,  via group policy,

but is the same if i manually set the configuration

i think extending the MAR timeout will  just increase the time, but would rather not get the cert prompts

[patoberli]

I have never seen the cert prompts, but I also don't use authentication with certificates. Do those client machines have more than one installed, or do you see a authentication denied on the radius, just before the popup appears?