I found this, but when I have need to do something similar in the past, I have used this method, it will need your AD tech’s to test

Essentially, if the machine auth fails….prompt the user (which will happen off campus)

 

https://community.arubanetworks.com/t5/Higher-Education/Guide-AD-Machine-Auth-Eduroam-ClearPass/gpm-p/135933

 

 

Kind regards

 

Gary Holder

Head of Information Technology Group

--------------------------------------------------------

 

PML_Logo

Prospect Place

Plymouth

PL1 3DH

Tel: 01752 633100

FaceBookTwitterLinkedinYoutube

 

From: Jisc eduroam(UK) service <[log in to unmask]> On Behalf Of AGM
Sent: 30 August 2019 16:15
To: [log in to unmask]
Subject: Re: Windows machine authentication

 

Ask Jon Agland or the guys at Swansea:

https://docs.google.com/presentation/d/1GU7TuU7giz1YFBK_ijZ93tuO9pEHQTijg929MRm5kSs/edit?pli=1#slide=id.gdcda083d_178

Andy Morris

On 30/08/2019 15:29, Mike Richardson wrote:

Hi all again,
 
Thanks for the responses so far: interesting and informative. 
 
I've managed to determine that machine auth isn't involved or wanted and the
site is simply(!) trying to get EAP-TLS to work. 
 
I've done the obligatory google and can't find anything specific on how to
do EAP-TLS for eduroam on Windows with NPS. Anyone got a guide? 
 
I'm particularly after the settings required in Windows 7/10, and how to get the
outer identity into a routeable format "@camford.ac.uk". 
 
You'll be helping the inhabitants of Yorkshire discover the wider world :-)
 
Thanks again,
 
Mike
 

 

--

Andrew G Morris BA(Hons)
Managing Director
Essington Computer Consultancy Ltd
07906 302791

See our latest news and services here

Data Cabling - Open Source Software - Networking - Virtualisation - IntelliRoam

The information in this message should be regarded as confidential and is intended for the addressee only unless explicitly stated.
If you have received this message in error it must be deleted and the sender notified.
In the interest of Sustainability please do not print this E-mail.

This email has been scanned by PML for spam & viruses. If you believe this email should have been stopped by our filters, click here to report it.

 

To unsubscribe from the EDUROAM-UK list, click the following link:
https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=EDUROAM-UK&A=1

Please visit our new website at www.pml.ac.uk and follow us on Twitter @PlymouthMarine

We have updated our Privacy Notice which is available at http://www.pml.ac.uk/System-pages/Privacy_Notice

Plymouth Marine Laboratory (PML) is a company limited by guarantee registered in England & Wales, company number 4178503. Registered Charity No. 1091222. Registered Office: Prospect Place, The Hoe, Plymouth  PL1 3DH, UK. 

This message is private and confidential. If you have received this message in error, please notify the sender and remove it from your system. You are reminded that e-mail communications are not secure and may contain viruses; PML accepts no liability for any loss or damage which may be caused by viruses.


To unsubscribe from the EDUROAM-UK list, click the following link:
https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=EDUROAM-UK&A=1