IAS/NPS 802.1x EAP-TLS Authentication Failed

Hi,

i'm having problem with EAP-TLS and my client (iphone).

I've installed a new PKI (sha2) and since this new pki, phones (iphone) cannot authenticate. Phones have the new root certificate and new user certificate in their store.

On the NPS server, i've got ID6273 "Denied access to user xxx" An error occurred during the NPS use of the authentication protocol (EAP). Reason code 23

In the svchost_RASTLS.log:

AcceptSecurityContext returned 0x90317
State change to SentFinised. Error 0x90317
Negociation Unsuccessful
BuildPacket
Sending failure (Code:4) ....
AuthResultCode = (590615), bCode= (4)

In the IASSAM.LOG:

EAP Authentication failed

The NPS server having a certificate delivered by the new PKI.

If someone can help me!?

many thanks