I'm working on an 802.1x deployment so that some domain joined computers authenticate to the wireless network using only a machine certificate. There are plenty of resources I'm able to find for MSCHAP/EAP-PEAP authentication and I've been able to get this working without any issues. It's only when I try to move away from Windows credentials that I have problems.
From what I understand, the computer needs a certificate issued by the CA, but I'm having trouble finding resources that explain what kind of certificate qualifies and how this certificate is identified in the NPS configuration. The configuration for specific certifications I can find in NPS relate to the server's certificate, not the client's. I've issued/enrolled the basic Computer template certificate to the computer's personal store but that didn't do the trick.
Does anyone have any solid resources for computer based 802.1x authentication? I'm using Server 2012R2 with an 8.1 client to test.
Thanks,
Kevin