ISE Deployment: Cisco recommendations to address this Windows 10 and Cisco EAP-Chaining deployment

[mronan]

Hello,

We are performing an EAP-Chaining ISE rollout and are running into the Windows 10 LSA issues where the computer name is encrypted and, as a result, fails authentication.

What are the current Cisco recommendations to address this Windows 10 and Cisco EAP-Chaining deployment?

Is it the LSA registry hack or is there something else that we need to consider?

[Nidhi · Accepted solution]

Windows 8 and above, you need to edit the registry keys and add LsaAllowReturningUnencryptedSecrets 

explained here - https://cisco-marketing.hosted.jivesoftware.com/thread/67962 

This registry fix is also mentioned   in Microsoft KB 2743127 

(http://support.microsoft.com/kb/2743127)

Thanks,

Nidhi