topic ISE BYOD | Missing Root Cert in iOS Certificate Trust Settings in Network Access Control

ISE BYOD | Missing Root Cert in iOS Certificate Trust Settings

bcotaz — Sun, 04 Aug 2019 10:08:53 GMT

Hi,

Configuring ISE(2.4) BYOD Single SSID with iPhone IOS version 12.3.1 using Self-signed certificate.

In Step 3 of the BYOD portal, i clicked "Launch Apple Profile and Certificate Installation Now" , it is showing Download Failed.

To manually trust the installed Certificate profile, in the iPhone i went to Settings > General > About > Certificate Trust Settings. But the Certificate is not listed so I cannot approve it.

Anybody experiencing the same problem?

Thank you,

Brian

Re: ISE BYOD | Missing Root Cert in iOS Certificate Trust Settings

Francesco Molino — Mon, 05 Aug 2019 17:55:55 GMT

Hi

Normally you should get there the ISE certificate presented when connecting to your SSID.
Have you tried removed your device from ISE, clean your profiles and try again?

Re: ISE BYOD | Missing Root Cert in iOS Certificate Trust Settings

howon — Mon, 05 Aug 2019 20:15:26 GMT

It may be due to profile popup happening back to back. There is initial profile you need to install which is probably self-signed cert profile and then another for the NSP profile. Make sure the self-signed cert profile is installed in the profile section first. Then head to the About > Certificate Trust Settings.

https://community.cisco.com/t5/security-documents/ise-byod-endpoint-notes/ta-p/3857246#toc-hId--1691018957

Re: ISE BYOD | Missing Root Cert in iOS Certificate Trust Settings

Surendra — Wed, 07 Aug 2019 18:24:50 GMT

Check this out https://community.cisco.com/t5/identity-services-engine-ise/byod-issues-with-apple-ios-12-3-1-ise-2-4-patch-6-and-wlc-8-8/td-p/3884455