Configure EAP-TLS Authentication with ISE

Publisher

Cisco Systems

URL

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/214975-configure-eap-tls-authentication-with-is.html

Published

2023-07-13

Updated

unknown

Accessed

2026-10-02

HTTP status

200

License

Cisco copyright; no-redistribution; short excerpts and locators only

Source notes citing this source

• EAP-TLS is enabled in ISE under Policy > Policy Elements > Results > Authentication > Allowed Protocols. in context
• An ISE Certificate Authentication Profile, created at Administration > Identity Management > External Identity Sources > Certificate Authentication Profile, tells ISE which certificate field holds the identity. in context
• EAP-TLS results are checked in ISE at Operations > RADIUS > Live Logs, where a success shows event 5200 Authentication succeeded. in context
• In ISE a CA certificate is imported at Administration > System > Certificates > Certificate Management > Trusted Certificates, with the usage Trust for client authentication and Syslog checked so it can validate EAP clients. in context

Cite this source record

APA

WarmTransfer. (2023, July 13). Configure EAP-TLS Authentication with ISE. WarmTransfer. https://warmtransfer.net/knowledge/sources/cisco-technote-214975-ise-eap-tls

BibTeX

@misc{warmtransfer-cisco-technote-214975-ise-eap-tls,
  title  = {Configure EAP-TLS Authentication with ISE},
  author = {{WarmTransfer}},
  year   = {2023},
  url    = {https://warmtransfer.net/knowledge/sources/cisco-technote-214975-ise-eap-tls},
  note   = {Cisco Systems, accessed 2026-10-02}
}