I'm deploying 802.1x on my wired networking and i'm facing a problem on the computers that do not have the cached profile created.
The service works fine when i have cached profiles, but when it comes to create a new profile into a windows machine, it doesnt work because i cant reach my domain server.
So, i went up into the internet and saw that certificate authentication is what i need. I'm trying to set up that but i'm facing a lot of doubts, like:
1) How do i setup the NPS policy to do that?
2) How do i create a computer certificate to my domain computers, so they can authenticate?
3) Do i need to do something on the switch besides set the authentication mode?
What i need to do is, that everyone who plugs a computer into my wired network, falls into a guest network, besides our managed computers, that will access our company VLANs. Thanks in advance for your help.