problem with MacBook and Radius server based access

[tbsvk]

Hi. Having 3x Meraki MR-32 with one SSID's access configured as "Enterprise with my Radius server" / "802.1X with custom RADIUS". This authentication is based in fact on Windows AD group. So, Windows computers working OK when they are in this group.
We joined new MacBook Air (latest MacOS, so 12.3.x) to Windows domain and then added to needed group. Despite that, Macbook cannot connect to wi-fi. Is it generally possible ?

[Brash]

It should be possible.

https://support.apple.com/en-au/guide/deployment/depabc994b84/web

Are you doing user or system auth via group policy?

What do you see in the radius logging when the Mac attempts to connect?

[tbsvk]

We are doing system auth (based on computer name). Problem that there is nothing in Microsoft NPS (so, Radius server) logs regarding Macbooks.

[redsector]

We need to install an certificate on the Apple devices. We use Cisco ISE as radius server and the rules says: must logon with an AD account and must have this certificate to get into the company´s VLAN.