Explicit EAP error 0x9009030C. Authentication failed due to a user credentials mismatch on NPS server

Question

We've been having a strange problem related to 802.1x authentication using internal CA certificates against a wireless network that uses 802.1x authentication. Most of the computers don't have issues but this problem crops up on newly setup machines which have acquired internal certs for 802.1X authentication recently. The Explicit EAP error 0x9009030C pops up from the endpoint Windows 11 pc end. On the Windows NPS RADIUS server side, we see eventlog ID 6273 "Authentication failed due to a user credentials mismatch. Either the user name provided does not map to an existing user account or the password was incorrect." Sometimes I can wire up the laptop and have the user login then the error goes away and wifi connects using 802.1x authentication miraculously. Often times, I need to remote to the pc and launch certificate management console as a domain account that is a local admin on the laptop and launch certificate management console to "request new certificate" then the problem also gets fixed. However, I do not have the real root cause that's causing this problem.

Anyone has any similar experience or insight on this?