Wireless (General)

NAC authentication when using Wndows Credential Guard

  • 1.  NAC authentication when using Wndows Credential Guard

    Posted 10-30-2017 02:13
    Our Windows admin tried enabling Credential Guard on a few test laptops, which promptly broke PEAP-MSCHAP auth to the wireless, as documented, so we turned it off again. The suggested workarounds include using certificate-based auth, which I would really like to avoid having to stand up a PKI. Are there any other ways to authenticate the user on a Windows device to the wifi with NAC when Credential Guard is enabled? It's a really nice feature in that it can block malware from moving horizontally across the network with cached user credentials.