Y
Yordan Yordanov
I have NPS on Windows Server 2012 R2 set up for 802.X authentication with EAP-PEAP-MSCHAPv2. Recently I disabled weak security protocols on the server - SSL 3 and TLS 1.0. This caused 802.1X authentication failures on the domain-joined machines (the machine doesn't connect to the wireless network neither with the machine account, nor with a user account). They are Windows 10 1709 and as far as I know they support TLS 1.2 which should also be supported by the server (and it is explicitly enabled in the Registry). I had to reenable TLS 1.0 (server) and TLS 1.0 (client) in order to mitigate the issue. But is it possible to enable only TLS 1.1 and 1.2 without causing any trouble? And what clients will be affected if implemented?
Continue reading...
Continue reading...