Cisco Secure Client / Duo Desktop authentication failing on Lenovo ThinkPads
I’m troubleshooting Cisco Secure Client VPN authentication with Duo MFA.
Most of our Dell laptops work fine, but we're experiencing issues with Lenovo ThinkPad E16 Gen 2 and Gen 3 laptops.
Hardware:
Failing: Lenovo ThinkPad E16 Gen 2 (21MA) and Gen 3 (21SR)
Working: Dell Precision 3590
Same iPhone and Duo account work on the Dell
Windows 11, Duo Desktop 7.22
Issue:
When logging into Cisco Secure Client, the Duo authentication page prompts us to Install Duo Desktop, even though it's already installed and running.
Clicking Open App launches Duo Desktop, briefly attempts to load, then returns to the installation prompt. Previously, we also encountered Duo Push notifications where the iPhone's Approve button was greyed out during Bluetooth proximity verification.
Troubleshooting completed:
-Updated Lenovo BIOS, Bluetooth/Wi-Fi drivers, and firmware
-Verified Bluetooth LE Enumerator and other Bluetooth components are working
-Confirmed all three Duo Desktop services are running
-Verified local Duo Desktop ports 53100/53106 are listening and reachable
-Confirmed HTTPS connectivity to localhost
-Verified Duo Desktop's URL protocol handler launches the application
-Tested disabling Secure Boot with no improvement
Duo Desktop logs contain repeated TrustedPeerConnection RPC timeout errors.
Has anyone encountered this with Lenovo ThinkPads and Duo Desktop/Cisco Secure Client?
I’m pulling my hair out with this, and would appreciate any pointers.