A customer has just implemented user and device certificates via a company-wide Group Based Policy...

 EAP-TLS is an authentication method that requires client certificates when authenticating to the network. It provides mutual authentication between the client and the server using public key cryptography and digital certificates. References:https://www.arubanetworks.com/techdocs/ClearPass/6.9/Guest/Content/CPPM_UserGuide/EAP-TLS/EAP-TLS.htm

EAP-TLS (Extensible Authentication Protocol-Transport Layer Security) is an EAP method that requires both server-side and client-side certificates for authentication. It is considered one of the most secure EAP methods because it uses a mutual authentication process where both the user and the authentication server must prove their identities to each other through the use of certificates. Implementing user and device certificates via a Group Based Policy (GPO) aligns well with EAP-TLS requirements for client-side certificates.