I would run a packet capture on the EAP traffic to see what happens, and if it's the client or switch that aborts the authentication.
If your client aborts the authentication (or does not even try because of lack of credentials), open a case with Microsoft.
If ClearPass stops responding, open a case with Aruba support.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Aug 04, 2023 04:10 AM
From: sir.sokol
Subject: Problem witch 8021x CPASS
Hi,
I turned off "Credential Guard" via GPO and there is an improvement but I still see problems with session reauthentication.
The error "0x70004" appears in the windows 10 system logs.
Original Message:
Sent: Jul 07, 2023 08:21 AM
From: ahollifield
Subject: Problem witch 8021x CPASS
This impacts windows 10 as well
Original Message:
Sent: 7/7/2023 7:39:00 AM
From: sir.sokol
Subject: RE: Problem witch 8021x CPASS
Hi,
When I check with power shell, I see that credential guard is turned on, but as far as I know, this is a problem only with windows 11 and I only have windows 10 clients.
Regards.
Original Message:
Sent: Jul 05, 2023 08:30 AM
From: ahollifield
Subject: Problem witch 8021x CPASS
Is credential guard enabled?
Original Message:
Sent: 7/5/2023 6:24:00 AM
From: sir.sokol
Subject: RE: Problem witch 8021x CPASS
Hi,
Half of the users authenticate EAP PEAP MSCHAPv2 and I check the user, supplicant configured "User and Computer"
The other half of the users authenticate with EAP TEAP and I check user (MSCHAPv2) and computer (TLS), supplicant configured "User and Computer"
Regards.
Original Message:
Sent: Jul 03, 2023 03:14 PM
From: ahollifield
Subject: Problem witch 8021x CPASS
This sounds to me like a supplicant configuration issue? How are the computers configured? PEAP? User? Machine? Both? or Teap? Machine? User? Both?
Original Message:
Sent: Jul 03, 2023 08:44 AM
From: sir.sokol
Subject: Problem witch 8021x CPASS
Hello,
I have a problem with 8021x PEAP MSCHAPv2 or TEAP authentication, i.e the first authentication is successful, the first re-authentication set in the profile to e.g. 6h goes well but the next re-authentication does not pass, the CPASS logs show "Timeout, Client did not complite eap transaction" - the host is disconnected and after 15 minutes the supplicant calls again and the authentication passes correctly .
Has anyone encountered such a problem?
Computers with windows 10 - mostly 21h2, HP Comware access switch.
Regards.