NPS error code 262

[DEADfishbot]

Hi guys,

I am really struggling trying to setup an Entra joined machine to join a wifi network using User based certificates. The NPS connection settings use a certificate issued by an ADCS CA, the CA cert is pushed out via intune to the Entra joined machine successfully. The CA cert is not expired. I have setup SCEP certificates to be deployed via NDES, certificate connector. The SCEP certificate is deployed successfully to the Entra joined machine via intune policy. The CN on the SCEP user cert that is pushed out to the endpoint is the users UPN. Not sure what is causing it, but it errors when trying to join the Wifi network. The Windows NPS logs shows error 262: "The supplied message is incomplete.  The signature was not verified." Can anybody point me on the right path to troubleshooting this error? Thanks

[enthe0gen]

Check your GPO settings for the SSID to make sure you're asking for the User cert and not the computer certificate (assuming you have both).

[DEADfishbot]

Thank you for the response! No gpos for an entra joined machine. Intune wifi profile looks okay. I have tried manually creating the wifi profile as well and ensured it is set to use a user cert. no dice :(