802.1x Wired Connection

Good Afternoon,

Our company is currently returning back to using Cisco ISE and 802.1x for authentication for both our Windows and Mac OSx devices. Our windows devices are using a XML configuration, along with Cisco Anyconnect NAM to manage the wired 802.1x connection.

For our macOSx devices, we did manage to get the macs working using various rules. The only issue we have right now is, Everytime you restart the mac, or if you reconnect the dongle w/Ethernet connection, you get prompted to select the machine certificate every time. Also, once you select the certificate, you have to keep adding the profile into keychain along with admin credentials every time, even after the initial setup and trusting both the root and intermediate certificates.

We do manage our macs with VMware Airwatch and was wondering if maybe there's a combination of both MDM and/or apple settings I can use to either suppress that pop up (Select a Certificate) or have the machine always use that certificate.

Any help or point in a direction would be appreciated.