NPS Radius 802.1X authentication fails after TLS 1.0 is disabled

NPS Radius 802.1X authentication fails after TLS 1.0 is disabled

Added the following registry entry to the NPS server

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\RasMan\PPP\EAP\13

New REG_DWORD named TlsVersion

Changed the Value to 0xf00 which sets tls to 1.1 and 1.2 otherwise it could be set as below.

  • TLS 1.0 0xC0
  • TLS 1.1 0x300
  • TLS 1.2 0xC00

Restart the EapHost service and re-test the connection.

Leave a Reply

Your email address will not be published. Required fields are marked *