Moderator commentary: Looks like there are multiple potential solutions for this problem. I'm going to highlight two of them here, to hopefully help those of you who land on this page from a search engine.
from @DeanN:
The issue that I found was that Device guard was enabled on windows 11. Disabled device guard via GPO and the issue was resolved. PC had to be rebooted after the port was changed back to 802.1x.
from @meiokilo011:
the solution found in our organization was to insert the certificate of the RADIUS servers via GPO for wired clients, and in the connection profile, mark both servers as trusted
... View more