A network administrator notices that after a company-wide shut down, many users cannot connect their...

Authenticate the user's system to the secondary Cisco ISE node and move this user to the primary with the renewed certificate.

Connect this system as a guest user and then redirect the web auth protocol to log in to the network.

Add a certificate issue from the CA server, revoke the expired certificate, and add the new certificate in system.

Allow authentication for expired certificates within the EAP-TLS section under the allowed protocols.