RouterOS 802.1x client & Windows NPS + AD CS

RouterOS General
1

Hello,
We have Mikrotik RB450Gx4 6.49beta27 configured as 802.1x client.
We generated certificate on Windows AD CS and installed to Mikrotik client certificate and Root CA. When we are enabling 802.1x on switch, we see that Access-Request reaches Windows NPS (as RADIUS server). Server sends Access-Challenge back. Switch receives this packet, sending EAP-TLS request to Mikrotik and that is it, Mikrotik doesn’t respond to it by Client-Hello. Have anyone did 802.1x client + Windows NPS?
mikrotik_cert.PNG
mikrotik_dot1x.PNG
Mikrotik_Capture.PNG
NPS_Capture.PNG

One dock with two computers & two VLANs
2

I have tried with the dot1x proxy. use the vlan authentication topology with active directory windows and it works. but this is for wired network.
how about using a wireless network?

https://prnt.sc/JUhtx31_hHE-